CVE-2024-49222
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 7, 2025
CWE ID 502
Summary
CVE-2024-49222 is a deserialization vulnerability affecting WPGuppy, a plugin used by Amento Tech Pvt Ltd. The issue permits Object Injection, which can be exploited by an attacker to execute arbitrary code on a WordPress site running the vulnerable version of WPGuppy, specifically from n/a through 1.1.0. An attacker could send malicious data for deserialization, leading to code execution and potential site takeover. This vulnerability poses a serious risk to WordPress sites using WPGuppy and demands immediate attention for patching.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.