CVE-2024-11334
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Nov 21, 2024
Updated: Nov 26, 2024
CWE ID 862
Summary
CVE-2024-11334 is a vulnerability affecting the My Contador lesr plugin for WordPress. The issue lies in the exportar_registros() function, which fails to perform necessary capability checks. Consequently, this flaw enables unauthenticated attackers to export user data, posing a significant risk to WordPress websites using this plugin in versions up to 2.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.