CVE-2024-10588
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Nov 9, 2024
Updated: Nov 12, 2024
CWE ID 862
Summary
CVE-2024-10588 is a vulnerability affecting the Debug Tool plugin for WordPress. This issue arises from a missing capability check on the info() function, impacting all versions up to 2.2. Consequently, authenticated attackers with subscriber-level access and above are able to gain unauthorized access to sensitive information by exploiting this flaw. When WP_DEBUG is enabled, this vulnerability can also be exploited by unauthenticated users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.