CVE-2024-13338
CVE-2024-13338 is a Cross-Site Request Forgery (CSRF) vulnerability in the Clearfy Cache WordPress plugin. Unauthenticated attackers can exploit this to clear the website cache by tricking an administrator into clicking a malicious link. The Clearfy Cache plugin, versions 2.3.1 and earlier, lacks proper nonce validation for the 'wclearfy_cache_delete' functionality, allowing CSRF attacks. Although the CVSS score is 5.3, the SOCRadar Vulnerability Risk Score (SVRS) is 52, indicating a moderate risk. Successful exploitation allows unauthorized cache clearing, potentially impacting website performance and user experience. While not immediately critical, patching is recommended to prevent potential attacks, especially as this vulnerability is tagged "In The Wild", meaning active exploitation is possible. This WordPress plugin vulnerability highlights the importance of CSRF protection in web applications.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.