CVE-2024-54268

Summary

CVE-2024-54268 is a new vulnerability affecting SiteOrigin's SiteOrigin Widgets Bundle. This missing authorization issue permits exploitation due to incorrectly configured access control security levels. The vulnerability can be exploited regardless of the version, from n/a to 1.64.0. Attackers can potentially gain unauthorized access and make modifications, putting websites using this plugin at risk. It is strongly advised to update to the latest version of SiteOrigin Widgets Bundle as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.