VulnSocial

CVE-2024-5432Active Exploitation(webinane / lifeline_donation)

LOWCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for webinane lifeline_donation systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

The Lifeline Donation plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.6. This is due to insufficient verification on the user being supplied during the checkout through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.

webinane CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-288CWE-287

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • lifeline_donation

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
webinane
Products
lifeline_donation

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-08: 1Active Exploitation · 2026-09-08: 109-08
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows attackers exploited CVE-2024-5432 to compromise N-able N-central RMM platforms, then leveraged the management infrastructure to pivot into multiple client networks. This incident demonstrates how compromised centralized management platforms can amplify blast radius across downstream organizations. #SupplyChainSecurity 🔗 Full TRC analysis: https://aviatrix.ai/threat-research-center/n-able-patches-max-severity-n-central-flaw-cve-2026-86218

    Post summary

    The text reports that attackers used CVE-2024-5432 to take control of N‑Able N‑Central RMM platforms, then pivoted into several client networks, underscoring the risk of a compromised central management layer.

    0000069
    2.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appwebinanelifeline_donation-wordpress-

Explore more

Back to dashboardwebinane CVEslifeline_donation vulnerabilities