CVE-2024-52420

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Nov 19, 2024
CWE ID 352

Summary

CVE-2024-52420 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Disable Admin Notices individually, from version n/a through 1.3.5. This issue allows attackers to manipulate user actions on affected websites, potentially leading to unintended changes or unauthorized access. CSRF attacks occur when an attacker tricks a user into performing an unwanted action on a different website, using the victim's authentication credentials. In the context of Disable Admin Notices individually, successful exploitation of this vulnerability could result in unauthorized modifications to the plugin's settings. Users are strongly advised to update to the latest, secure version of Disable Admin Notices individually to protect against this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share