CVE-2024-10816
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Nov 13, 2024
CWE ID 22
Summary
CVE-2024-10816 is a newly disclosed vulnerability affecting the LUNA RADIO PLAYER plugin for WordPress. This issue, present in all versions up to 6.24.01.24, allows unauthenticated attackers to traverse directories through the js/fallback.php file. Consequently, these adversaries can read arbitrary files on the server, potentially gaining access to sensitive information. This vulnerability poses a significant risk and requires immediate attention from WordPress users running the LUNA RADIO PLAYER plugin to ensure their systems are secure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.