CVE-2024-13336

CVE-2024-13336 affects the Disable Auto Updates plugin for WordPress (versions up to 1.4). The connected report confirms a CSRF vulnerability on the plugin’s Disable Auto Updates page due to missing nonce validation, allowing an unauthenticated attacker to disable all auto updates if they can lur...