CVE-2024-37503
Published: 02 January 2025
Description
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue affects Lawyer Landing Page: from n/a through <= 1.2.4.
Security Summary
CVE-2024-37503 is a Cross-Site Request Forgery (CSRF) vulnerability, mapped to CWE-352, in the Lawyer Landing Page WordPress theme by Raratheme. The issue affects the theme from unknown initial versions through 1.2.4 and was published on 2025-01-02.
The vulnerability carries a CVSS v3.1 base score of 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). Attackers can exploit it remotely over the network with low attack complexity and no required privileges, though it demands user interaction, such as a victim clicking a malicious link while authenticated to the site. Exploitation enables low-impact integrity effects, allowing unauthorized actions to be performed on the victim's behalf.
Mitigation guidance is available in the Patchstack advisory at https://patchstack.com/database/Wordpress/Theme/lawyer-landing-page/vulnerability/wordpress-lawyer-landing-page-theme-1-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve.
Details
- CWE(s)