CVE-2024-10529

Summary

CVE-2024-10529 is a vulnerability affecting the Kognetiks Chatbot plugin for WordPress. The issue lies in the lack of capability checks on the delete_assistant() function, which is present in all versions up to 2.1.7. This oversight enables authenticated attackers, who possess subscriber-level access or higher, to unauthorizedly delete GTP assistants. Consequently, sensitive data could be compromised or lost, leading to potential business disruption. It is imperative that WordPress users update the plugin to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.