CVE-2024-13544

Summary

CVE-2024-13544 is a vulnerability affecting the Zarinpal Paid Download plugin for WordPress. This issue allows high privilege users, such as admins, to upload arbitrary files to the server, even when they should be restricted from doing so. In multisite setups, this vulnerability can pose a significant risk. The plugin, up to version 2.3, fails to adequately validate uploaded files, enabling unauthorized file uploads with potential security implications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.