Cross-Site Request Forgery Vulnerability in WP Abstracts Plugin by WordPress

CVE-2024-12386

What is CVE-2024-12386?

The WP Abstracts plugin for WordPress contains a Cross-Site Request Forgery vulnerability present in all versions up to and including 2.7.3. This flaw arises from the absence of nonce validation in several functions, allowing unauthenticated attackers to potentially delete user accounts. Attackers can exploit this vulnerability by tricking administrators into executing malicious actions, such as clicking on deceptive links.

References