CVE-2024-10284

Summary

CVE-2024-10284 is a vulnerability affecting the CE21 Suite plugin for WordPress. This issue allows unauthenticated attackers to bypass authentication by exploiting a hardcoded encryption key in the 'ce21_authentication_phrase' function. As a result, attackers can log in as any existing user, including administrators, if they have access to the email address associated with that user account. This vulnerability poses a significant threat to WordPress sites using the CE21 Suite plugin in versions up to and including 2.2.0. Immediate updates to the plugin or implementation of related security patches are necessary to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.