CVE-2024-10567

Summary

CVE-2024-10567 is a vulnerability affecting the TI WooCommerce Wishlist plugin for WordPress. The issue stems from a missing capability check on the 'wizard' function, which is present in all versions up to 2.9.1. As a result, unauthenticated attackers can exploit this vulnerability to create new pages, modify plugin settings, and make limited options updates. This poses a significant risk to WordPress sites using the TI WooCommerce Wishlist plugin, necessitating immediate remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.