CVE-2024-10216

Summary

CVE-2024-10216 is a vulnerability affecting the WP User Manager plugin for WordPress. This issue allows authenticated attackers with Subscriber-level access or higher to unauthorizedly modify data by bypassing capability checks on the 'add_sidebar' and 'remove_sidebar' functions. Version 2.9.11 and earlier are susceptible to this vulnerability. Attackers can add or remove a Carbon Fields custom sidebar if the Carbon Fields plugin is installed, leading to potential security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.