CVE-2024-10543

Summary

CVE-2024-10543 is a vulnerability affecting the Tumult Hype Animations plugin for WordPress. The issue lies in the plugin's hypeanimations_getcontent function, which lacks sufficient capability checks in all versions up to 1.9.14. This oversight allows authenticated attackers with Subscriber-level access or higher to unauthorizedly access animation information, posing a risk to data security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.