CVE-2024-12274
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jan 13, 2025
Summary
CVE-2024-12274 is a vulnerability affecting the Appointment Booking Calendar Plugin and Scheduling Plugin for WordPress. Before version 1.1.23, this plugin exported settings data to a public folder with a predictable filename, enabling unauthenticated attackers to access the files if they exist. This issue could potentially lead to exposure of sensitive data. Users are advised to update to the latest plugin version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.