CVE-2024-10663

Summary

CVE-2024-10663 is a vulnerability affecting the Eleblog – Elementor Blog And Magazine Addons plugin for WordPress. This issue arises from a missing capability check in the goodbye_form_callback() function, which is present in all versions up to 1.8. As a result, authenticated attackers with Subscriber-level access or higher can manipulate data through this vulnerability, making it essential for users to update their plugins to a patched version to prevent unauthorized modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.