CVE-2024-10871

Summary

CVE-2024-10871 is a newly disclosed vulnerability affecting the Category Ajax Filter plugin for WordPress. This issue, occurring in all versions up to 2.8.2, allows unauthenticated attackers to execute arbitrary files on the server through the 'params[caf-post-layout]' parameter. By exploiting this Local File Inclusion vulnerability, attackers can bypass access controls, obtain sensitive information, and execute any PHP code present in the included files. In instances where .php files can be uploaded and included, the attacker can achieve code execution on the target system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.