CVE-2024-51876

Summary

CVE-2024-51876 is a Cross-site Scripting (XSS) vulnerability affecting the wp_automatic_widget in Codstack Team. The flaw, which is DOM-Based, allows attackers to inject malicious scripts into web pages generated by this plugin. This issue can lead to unauthorized data access or theft of sensitive information when users visit compromised websites. The vulnerability affects versions of wp_automatic_widget from n/a through 1.0.1. Users are strongly advised to apply the necessary patches or update their installations to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.