CVE-2024-54321
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-54321 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Hive Support plugin for WordPress. The flaw in Hive Support – WordPress Help Desk, from versions n/a through 1.1.2, allows an attacker to manipulate user actions on a targeted website, potentially leading to unintended changes or data leaks. This issue can be exploited through malicious requests made by an attacker to a user who has already authenticated and is browsing the vulnerable website. Users are encouraged to promptly update their Hive Support plugin to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.