CVE-2024-12571

Summary

CVE-2024-12571 is a vulnerability affecting the Store Locator for WordPress with Google Maps – LotsOfLocales plugin. The issue lies in version 3.98.9 and stems from a Local File Inclusion flaw in the 'sl_engine' parameter. This vulnerability enables unauthenticated attackers to include and execute arbitrary files on the server, potentially leading to the execution of any PHP code contained in those files. Consequently, attackers can bypass access controls, obtain sensitive data, and execute malicious code in instances where images and other "safe" file types can be uploaded and included.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.