CVE-2024-12164

Summary

CVE-2024-12164: A vulnerability affects the WPSyncSheets Lite For WPForms plugin for WordPress. The issue lies within the wpsslwp_reset_settings() function, which lacks adequate capability checks. This oversight enables authenticated attackers with Subscriber-level access or higher to manipulate the plugin's settings unauthorizedly, potentially leading to data modification. Updates to the plugin beyond version 1.6 are required for mitigation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.