CVE-2024-12617

Summary

CVE-2024-12617 is a vulnerability affecting the WC Price History plugin for WordPress versions 2.1.3 and below. This issue allows authenticated attackers, with a Subscriber-level access or higher, to gain unauthorized access to price history data through missing capability checks on several AJAX actions. This vulnerability poses a significant risk, as attackers can view and modify this sensitive data, potentially leading to financial losses or other unwanted consequences. It is recommended that users of the WC Price History plugin update to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.