CVE-2024-11184
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Jan 2, 2025
Updated: Jan 6, 2025
Summary
CVE-2024-11184 is a vulnerability affecting the wp-enable-svg WordPress plugin. This issue allows authors and above to upload malicious SVG files without proper sanitization, potentially injecting malicious scripts that can pose a security risk to websites using the plugin. The plugin fails to filter out harmful code, making it an attractive target for attackers looking to exploit this vulnerability. Websites using versions of the wp-enable-svg plugin below 0.8 are advised to update or remove the plugin immediately to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.