WordPress Sogrid plugin <= 1.5.2 - CSRF to Privilege Escalation vulnerability

CVE-2024-54352

What is CVE-2024-54352?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Sogrid, a product by Sabri Taieb. This security flaw allows an attacker to perform actions on behalf of an authenticated user, potentially leading to privilege escalation. The vulnerability impacts Sogrid versions prior to and including 1.5.2, posing significant security risks for users. It is crucial for organizations using this product to assess their exposure and take necessary steps to mitigate the vulnerability.

References