CVE-2024-10582
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 862
Summary
CVE-2024-10582 is a vulnerability affecting the Music Player for Elementor plugin for WordPress. This issue arises from a missing capability check on the import_mpfe_template() function, which exists in all versions up to 2.4.1. As a result, authenticated attackers with Subscriber-level access or higher can exploit this flaw to unauthorizedly import templates, posing a risk to data integrity.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.