CVE-2024-47323

Summary

CVE-2024-47323 is a newly disclosed Path Traversal vulnerability affecting the WP Timeline – Vertical and Horizontal plugin for WordPress. The flaw allows an attacker to gain unauthorized PHP Local File Inclusion access by improperly limiting a pathname to a restricted directory. This vulnerability exists in versions of the plugin from n/a through 3.6.7, potentially putting many WordPress websites at risk. Successful exploitation could lead to exposure of sensitive information or even complete system takeover. Users of the WP Timeline plugin are strongly advised to update to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.