CVE-2024-1322

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Feb 29, 2024

Summary

CVE-2024-1322 is a vulnerability found in the Directorist – WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress. This vulnerability exists in all versions up to and including 7.8.4 and allows unauthenticated attackers to modify data without authorization. Specifically, the 'setup_wizard' function lacks a capability check, enabling attackers to recreate default pages, enable or disable monetization, and change the map provider. The base severity of this vulnerability is rated as MEDIUM, with a base score of 5.3 according to CVSS version 3.1. The exploitability score is 3.9, indicating a moderate level of difficulty for potential attacks. The impact score is 1.4, suggesting low integrity impact and no confidentiality impact. Remediation for this vulnerability involves updating the plugin to a fixed version or applying any available patches provided by the plugin developer. Failure to address this vulnerability could pose risks to organizations using the affected plugin, potentially allowing unauthorized modifications and disruptions to their WordPress business directory functionality.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1322 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options