CVE-2024-52448

Summary

CVE-2024-52448 is a newly disclosed vulnerability affecting the WebCodingPlace Ultimate Classified Listings plugin. The issue involves an improper limitation of file pathnames, enabling a Path Traversal attack. An attacker can exploit this vulnerability to include locally stored PHP files, potentially leading to unauthorized system access or data disclosure. The affected versions of the plugin range from n/a to 1.4. It is crucial for users to apply the necessary patches or updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.