CVE-2024-10913
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 20, 2024
Updated: Nov 21, 2024
CWE ID 502
Summary
CVE-2024-10913: This vulnerability affects the Clone plugin for WordPress, allowing unauthenticated attackers to inject PHP Objects via deserialization in the 'recursive_unserialized_replace' function. No known Pop chain exists in the vulnerable software, but one could be present through additional plugins or themes, potentially leading to file deletion, data retrieval, or code execution. All versions up to 2.4.6 are affected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.