CVE-2024-12620
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Feb 1, 2025
CWE ID 862
Summary
CVE-2024-12620: Unauthenticated attackers can exploit a missing capability check in the 'agl_json' AJAX action of the AnimateGL Animations plugin for WordPress, affecting versions up to 1.4.23. This vulnerability allows unauthorized data modification, enabling attackers to update plugin settings. This poses a significant security risk as it can lead to unintended functionality or even malicious code execution within WordPress sites. It is crucial for users to update their plugins to the latest version as soon as possible to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.