CVE-2024-12559

Summary

CVE-2024-12559 is a vulnerability affecting the ClickDesigns plugin for WordPress. The issue lies in the lack of capability checks on the 'clickdesigns_add_api' and 'clickdesigns_remove_api' functions, present in all versions up to 1.8.0. Consequently, unauthenticated attackers can exploit this vulnerability to modify or delete the plugin's API key, posing a significant security risk. This weakness could potentially lead to unauthorized access to the plugin, resulting in data manipulation or unintended functionality. It is crucial for WordPress users to update the ClickDesigns plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.