CVE-2024-13117

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 27, 2025
Updated: Feb 3, 2025

Summary

CVE-2024-13117 is a vulnerability affecting the Social Share Buttons for WordPress plugin before version 2.8. This issue allows unauthenticated users to upload arbitrary images and manipulate their storage locations, posing a potential security risk for WordPress websites using this plugin. Successful exploitation could result in unauthorized file uploads and potential directory traversal attacks. Site owners are encouraged to update to the latest plugin version as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Social Share Buttons Plugin

Affected Vendors

  • Supsystic