CVE-2024-10960

Summary

CVE-2024-10960 is a vulnerability affecting the Brizy – Page Builder plugin used in WordPress sites. The issue lies in the 'storeUploads' function, which fails to validate file types, allowing authenticated attackers with Contributor-level access or higher to upload arbitrary files. Successful exploitation may result in remote code execution on the affected server. This vulnerability poses a significant risk, and users are advised to update to the latest version of the plugin to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.