CVE-2024-12331
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Dec 19, 2024
CWE ID 862
Summary
CVE-2024-12331 is a vulnerability affecting the File Manager Pro – Filester plugin for WordPress. This issue allows authenticated attackers with Subscriber-level access and above to unauthorizedly modify data. The root cause is a missing capability check in the 'ajax_install_plugin' function, present in all versions up to 1.8.6. This vulnerability permits the installation of the Filebird plugin without proper authorization, posing a potential security risk for WordPress sites using the File Manager Pro plugin.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.