CVE-2024-10245

Summary

CVE-2024-10245 is a vulnerability affecting the Relais 2FA plugin for WordPress. The issue stems from a flaw in the 'rl_do_ajax' function, which compromises authentication and capability checks. Consequently, unauthenticated attackers can bypass the authentication process and gain access to existing user accounts, including administrator accounts, if they have access to the targeted email address. This vulnerability poses a significant security risk, as it allows unauthorized access to WordPress sites, potentially leading to data breaches and other malicious activities.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.