CVE-2024-1129

Summary

CVE-2024-1129 is a vulnerability affecting the NEX-Forms plugin for WordPress. This issue allows authenticated attackers, with subscriber-level access and above, to gain unauthorized access by bypassing a missing capability check on the set_starred() function. This vulnerability exists in all versions up to and including 8.5.6. As a result, attackers can mark records as starred, potentially leading to unintended consequences or further exploitation. WordPress users are advised to update the NEX-Forms plugin to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.