CVE-2024-12113
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 25, 2025
CWE ID 862
Summary
CVE-2024-12113 is a vulnerability affecting the Youzify plugin for WordPress. This issue allows authenticated attackers with Subscriber-level access or higher to delete other users' reviews without proper authorization. The plugin's delete_user_review() and delete_review() functions are missing capability checks, making data loss an unintended consequence. Versions up to and including 1.3.2 are reportedly impacted.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.