CVE-2023-4318

Summary

CVE-2023-4318 is a vulnerability affecting the Herd Effects WordPress plugin before version 5.2.4. This issue permits Cross-Site Request Forgery (CSRF) attacks, enabling unauthorized deletion of plugin items. Attackers can exploit this vulnerability to manipulate logged-in admin users into deleting arbitrary effects, potentially leading to data loss or unintended plugin modifications. The lack of CSRF protection in the plugin's deletion functionality exposes WordPress sites using this plugin to these risks. Users are advised to update to the latest plugin version as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.