CVE-2024-13117
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 27, 2025
Updated: Feb 3, 2025
Summary
CVE-2024-13117 is a vulnerability affecting the Social Share Buttons for WordPress plugin before version 2.8. This issue allows unauthenticated users to upload arbitrary images and manipulate their storage locations, posing a potential security risk for WordPress websites using this plugin. Successful exploitation could result in unauthorized file uploads and potential directory traversal attacks. Site owners are encouraged to update to the latest plugin version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Social Share Buttons Plugin
Affected Vendors
- Supsystic