CVE-2024-52421
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-52421 is a newly disclosed vulnerability affecting the WP Popup Window Maker plugin for WordPress. This issue involves a Cross-Site Request Forgery (CSRF) vulnerability that also includes Stored XSS capabilities. Attackers can exploit this flaw to inject malicious code into a targeted user's session, potentially leading to unauthorized actions on the affected WordPress site. The vulnerability impacts versions of WP Popup Window Maker from n/a up to and including 2.0. Users are advised to update to the latest, secure version of the plugin as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.