CVE-2024-10666

Summary

CVE-2024-10666 is a newly identified vulnerability affecting the Easy Twitter Feed plugin for WordPress. This Information Exposure issue allows authenticated attackers with Contributor-level access or higher to extract data from password-protected, private, or draft posts. Specifically, attackers can exploit the [etf] shortcode to gain unauthorized access to this sensitive information, potentially leading to data breaches and privacy violations. Versions of the plugin up to and including 1.2.6 are affected by this vulnerability. Users are strongly advised to update the plugin to the latest version or consider disabling the shortcode until a patch is available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.