CVE-2024-1652

Summary

CVE-2024-1652 is a vulnerability affecting the Categorify plugin for WordPress. The issue stems from a missing capability check within the 'categorifyAjaxClearCategory' function, which is present in all versions up to and including 1.0.7.4. This oversight allows authenticated attackers, even those with subscriber-level access, to unauthorizedly clear categories, resulting in potential data modification.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.