CVE-2024-12596
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Dec 18, 2024
CWE ID 862
Summary
CVE-2024-12596 is a vulnerability affecting the LifterLMS plugin for WordPress, versions 7.8.5 and below. This issue allows authenticated attackers, with Subscriber-level access and higher, to delete arbitrary posts without the required capability check on the 'llms_delete_cert' action. Consequently, attackers can manipulate content and potentially disrupt e-learning sites using this vulnerability. It is essential to update the LifterLMS plugin as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.