CVE-2024-10952

Summary

CVE-2024-10952 is a vulnerability affecting the The Authors List plugin for WordPress. In versions up to and including 2.0.4, the plugin fails to properly validate user input in the update_authors_list_ajax AJAX action, leading to arbitrary shortcode execution. This issue allows unauthenticated attackers to execute arbitrary code on vulnerable WordPress sites, posing a significant security risk. The vulnerability can be exploited by sending malicious data to the plugin through this action, resulting in potential unauthorized functionality or data exposure. Users are strongly advised to update the plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.