CVE-2024-32603

CVSS 3.1 Score 8.5 of 10 (high)

Details

Published Apr 18, 2024
CWE ID 502

Summary

CVE-2024-32603 is a newly disclosed vulnerability that impacts ThemeKraft's WooBuddy plugin. The flaw involves deserialization of untrusted data, which can lead to arbitrary code execution. This issue puts WooBuddy users whose plugins range from the unspecified version through 3.4.20 at risk. Successful exploitation of this vulnerability could result in significant security implications, including unauthorized access, data theft, or system compromise. It is strongly recommended that users update their WooBuddy plugins to the latest version as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share