CVE-2024-12327
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 7, 2025
CWE ID 862
Summary
CVE-2024-12327 is a vulnerability affecting the LazyLoad Background Images plugin for WordPress. The issue lies in the pblzbg_save_settings() function, which lacks sufficient capability checks. This flaw allows authenticated attackers, with Subscriber-level access and above, to modify plugin settings unauthorizedly. Successful exploitation could lead to undesirable changes or misconfigurations, posing a potential security risk to WordPress websites using this plugin in versions up to 1.0.7.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.