CVE-2024-49633

Summary

CVE-2024-49633 is a Cross-site Scripting (XSS) vulnerability affecting DirectoryPress, a plugin used in WordPress sites. The flaw, which occurs during web page generation, permits attackers to inject malicious scripts into a victim's browser. This can lead to session hijacking, data theft, or other unauthorized actions. DirectoryPress versions from n/a to 3.6.19 are susceptible to this issue. To mitigate the risk, it is recommended that users update to the latest version of DirectoryPress as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.