CVE-2024-11733
CVSS 3.1 Score 7.3 of 10 (high)
Details
Summary
CVE-2024-11733 is a newly disclosed vulnerability affecting the WordPress Popular Posts plugin. The issue lies in the plugin's failure to properly validate user input, which enables unauthenticated attackers to execute arbitrary shortcodes. This vulnerability exists in all versions up to and including 7.1.0, posing a significant risk to websites using this plugin. Successful exploitation could result in unintended functionality, potentially leading to serious security consequences. Users are urged to update to the latest version of the plugin as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.