CVE-2024-47352

Summary

CVE-2024-47352 is a newly disclosed Cross-Site Scripting (XSS) vulnerability impacting Xylus Themes' WP Bulk Delete plugin. The flaw, located in the theme's WP Bulk Delete plugin, permits attackers to inject malicious scripts during web page generation. This issue puts sites using WP Bulk Delete versions 1.3.1 and below at risk of XSS attacks. Attackers can exploit this vulnerability by injecting malicious scripts into a webpage, potentially stealing user information or gaining unauthorized access. It is critical for affected WordPress sites to upgrade to the latest version of WP Bulk Delete to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.