CVE-2024-12071
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 18, 2025
CWE ID 862
Summary
CVE-2024-12071: A critical vulnerability affects the Evergreen Content Poster plugin for WordPress, versions up to 1.4.4. This issue stems from a missing capability check in the delete_network_post() function, enabling unauthenticated attackers to delete arbitrary posts and pages on a WordPress site. This loss of data can lead to significant consequences and potential disruptions to the site's functionality. To mitigate this risk, users are advised to update the plugin to the latest version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.