CVE-2024-10482

Summary

CVE-2024-10482 is a vulnerability affecting the Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before version 1.5.0. This issue allows users with a minimal Author role to upload malicious SVG files that are not properly sanitized. The malicious SVG files can contain XSS (Cross-Site Scripting) payloads, enabling attackers to inject and execute harmful code on a vulnerable WordPress site. This can lead to unauthorized data access, site takeover, or other malicious activities. Users are strongly advised to update their plugins to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.