CVE-2024-1095
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Mar 5, 2024
Updated: Jan 8, 2025
CWE ID 94
Summary
CVE-2024-1095 is a vulnerability affecting the Build & Control Block Patterns – Boost up Gutenberg Editor plugin for WordPress. This issue stems from a missing capability check in the settings_export() function, present in all versions up to and including 1.3.5.4. Consequently, unauthenticated attackers can exploit this vulnerability and gain unauthorized access to the plugin's settings by exporting them. This poses a significant risk, potentially allowing attackers to modify or steal sensitive information from affected WordPress sites.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WPPA