CVE-2024-12875
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Dec 21, 2024
Updated: Feb 7, 2025
CWE ID 22
CWE ID 73
Summary
CVE-2024-12875 is a directory traversal vulnerability affecting the Easy Digital Downloads plugin for WordPress, versions 3.3.2 and below. This issue allows authenticated attackers with Administrator-level access to read arbitrary files on the server through the plugin's file download functionality. Successful exploitation can expose sensitive information, posing a significant risk to the security of impacted WordPress sites.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.