CVE-2024-54356

Summary

CVE-2024-54356 is a Cross-Site Request Forgery (CSRF) vulnerability identified in the vCita Online Booking & Scheduling Calendar plugin for WordPress. This issue permits attackers to force unintended actions on affected users' websites, potentially leading to unauthorized modifications or information disclosure. The vulnerability impacts versions of the plugin from n/a through 4.5. Users are advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.