CVE-2024-4875
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published May 21, 2024
Summary
CVE-2024-4875 is a vulnerability affecting the HT Mega – Absolute Addons For Elementor plugin used in WordPress sites. The issue lies in the 'ajax_dismiss' function, which lacks adequate capability checks. This flaw permits authenticated attackers, possessing subscriber-level permissions or higher, to manipulate options such as 'users_can_register'. Consequently, unauthorized user registration becomes a potential risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.