CVE-2024-11327
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Jan 11, 2025
CWE ID 79
Summary
CVE-2024-12204 is a vulnerability affecting the Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, and WooCommerce Popups plugin for WordPress. The issue lies in the class-cx-rest.php file, where several functions lack proper capability checks. This weakness allows authenticated attackers, including those with Subscriber-level access, to execute unauthorized actions such as creating 100% off coupons, deleting posts, eliminating leads, and updating coupon statuses.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.