CVE-2024-13683
The Automate Hub Free by Sperse.IO plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.0. This is due to missing or incorrect nonce validation on the 'automate_hub' page. This makes it possible for unauthenticated attackers to update an activation status via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Vendor
Product
CWE
Yayın Tarihi
2025-01-24 07:15:08
Güncelleme
2025-02-05 17:18:36
Source Identifier
security@wordfence.com
KEV Date Added
-