CVE-2024-13337
CVE-2024-13337: Cross-Site Request Forgery (CSRF) vulnerability in the Clearfy Cache WordPress plugin. This flaw allows unauthenticated attackers to modify plugin settings if they can deceive an administrator into clicking a malicious link. The CSRF vulnerability affects versions up to 2.3.2 of the Clearfy Cache WordPress plugin. While the CVSS score is 4.3, the SOCRadar Vulnerability Risk Score (SVRS) of 45 indicates a moderate level of risk. Exploitation could lead to unauthorized changes to website configuration and potentially further compromise. Although not critical, proactive patching is still recommended to mitigate potential exploitation attempts. This vulnerability is especially concerning due to the widespread use of WordPress and the potential for attackers to leverage social engineering to exploit it.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.