CVE-2024-11583

Summary

CVE-2024-11583 is a vulnerability affecting the Borderless plugin for WordPress, specifically versions up to 1.5.9 of the Elementor & Gutenberg add-on. This issue involves a missing capability check on the 'remove_zipped_font' function, which allows authenticated attackers with Subscriber-level access or higher to delete previously uploaded icon fonts without proper authorization. This unauthorized data deletion poses a risk to the functionality and customization of affected WordPress sites.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.