CVE-2024-12163

Summary

CVE-2024-12163 is a vulnerability affecting the goodlayers-core WordPress plugin before version 2.1.3. This issue grants users with subscriber roles and above the ability to upload malicious SVG files, which can contain harmful payloads and potentially compromise a WordPress site. Attackers can exploit this vulnerability by tricking users into uploading the infected files, posing a significant risk to websites using the outdated plugin version. It's essential for WordPress site owners to update their goodlayers-core plugin to the latest version to mitigate this security concern.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.