CVE-2024-1108
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2024-1108 is a vulnerability affecting the Plugin Groups plugin for WordPress up to version 2.0.6. It allows unauthenticated attackers to modify data and change plugin settings, potentially leading to a denial of service due to misconfiguration. The vulnerability does not require any privileges or user interaction and can be exploited over a network. The base severity is rated as MEDIUM with a base score of 6.5 according to the CVSS v3.1 scoring system. The risk score associated with this vulnerability is 25, indicating a moderate level of risk to organizations using the affected plugin. No changes or updates have been made since its discovery, and the exploitability score is 3.9 out of 10, suggesting that exploitation may be feasible but not trivial.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions