CVE-2024-10285
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Nov 9, 2024
Updated: Nov 12, 2024
CWE ID 200
Summary
CVE-2024-10285 is a vulnerability affecting the CE21 Suite plugin for WordPress. In versions up to 2.2.0, an issue exists that allows unauthenticated attackers to access sensitive information through the plugin-log.txt file. By leveraging this vulnerability, attackers can log in using the user associated with a JSON Web Token (JWT). This vulnerability poses a significant risk to WordPress sites using the CE21 Suite plugin and should be addressed promptly by updating to a patched version.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.