CVE-2024-52420
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-52420 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Disable Admin Notices individually, from version n/a through 1.3.5. This issue allows attackers to manipulate user actions on affected websites, potentially leading to unintended changes or unauthorized access. CSRF attacks occur when an attacker tricks a user into performing an unwanted action on a different website, using the victim's authentication credentials. In the context of Disable Admin Notices individually, successful exploitation of this vulnerability could result in unauthorized modifications to the plugin's settings. Users are strongly advised to update to the latest, secure version of Disable Admin Notices individually to protect against this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.