CVE-2024-52395

Summary

CVE-2024-52395 is a new vulnerability affecting QunatumCloud's Floating Buttons extension for WooCommerce. The issue involves missing authorization, which can be exploited when access control security levels are incorrectly configured. An attacker can potentially gain unauthorized access, posing a significant risk for websites using the Floating Buttons plugin from version n/a to 2.8.8. It is recommended that users upgrade to the latest version of the plugin as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.