CVE-2024-12781
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 7, 2025
CWE ID 862
Summary
CVE-2024-12781 is a vulnerability affecting the Aurum - WordPress & WooCommerce Shopping Theme. This issue stems from a missing capability check on the 'lab_1cl_demo_install_package_content' function, present in all versions up to 4.0.2. Authenticated attackers, even those with Subscriber-level access, can exploit this flaw to overwrite content with imported demo data, leading to unauthorized modification of data within the theme.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.