CVE-2024-11585

Summary

CVE-2024-11585 is a vulnerability affecting the WP Hide & Security Enhancer plugin for WordPress. The issue stems from a missing authorization and inadequate file path validation in the file-process.php, which is present in all versions up to 2.5.1. This weakness allows unauthenticated attackers to delete arbitrary files on the server, leading to potential site breakdown or data loss.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.