CVE-2024-38753: WordPress Animated Rotating Words Plugin <= 5.6 - Cross Site Request Forgery (CSRF) vulnerability

Q: What is the severity of CVE-2024-38753?

CVE-2024-38753 is classified as a medium-severity Cross-Site Request Forgery (CSRF) vulnerability.

Q: How do I fix CVE-2024-38753?

To fix CVE-2024-38753, upgrade the Animated Rotating Words plugin to version 5.7 or later.

Q: Who is affected by CVE-2024-38753?

CVE-2024-38753 affects users of the Labib Ahmed Animated Rotating Words and the related WordPress Animated Rotating Words Plugin versions up to 5.6.

Q: What is the impact of CVE-2024-38753?

The impact of CVE-2024-38753 allows unauthorized actions to be performed on behalf of authenticated users without their consent.

Q: Is CVE-2024-38753 a widespread vulnerability?

CVE-2024-38753 can be considered widespread due to the common use of the affected plugin among WordPress users.

Published Jan 2, 2025

Updated

Cross-Site Request Forgery (CSRF) vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Cross Site Request Forgery.This issue affects Animated Rotating Words: from n/a through <= 5.6.

Affected Software

1 affected component

Labib Ahmed Animated Rotating Words (css3-rotating-words)<=5.6

Remediation

Information

No patched version is available. This plugin has been closed as of July 10, 2024 and is not available for download. This closure is temporary, pending a full review.

Event History

Jan 2, 2025

CVE Published

via MITRE·12:01 PM

Data Sourced

via MITRE·12:01 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-38753?

CVE-2024-38753 is classified as a medium-severity Cross-Site Request Forgery (CSRF) vulnerability.

How do I fix CVE-2024-38753?