CVE-2024-11034

Summary

CVE-2024-11034 is a vulnerability affecting the Request a Quote plugin for WordPress used with WooCommerce and Elementor. The issue allows unauthenticated attackers to execute arbitrary shortcodes via the fire_contact_form AJAX action, due to insufficient validation of input values before the do_shortcode function is called. This vulnerability can lead to the execution of malicious code and potentially serious security consequences. Users of affected versions (up to and including 1.4) are urged to update the plugin as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.