CVE-2024-13554

Summary

CVE-2024-13554 is a vulnerability affecting the WP Extended plugin for WordPress. The issue lies in the reorder_route() function, which lacks sufficient capability checks. This oversight enables unauthenticated attackers to manipulate post orders unintendedly, posing a security risk to WordPress sites using this plugin in versions up to 3.0.13.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.