CVE-2024-54278

Summary

CVE-2024-54278 is a Missing Authorization vulnerability affecting Plugin Devs News Ticker for Elementor. This issue allows unauthorized access to functionality, bypassing Access Control Lists (ACLs), and impacts all versions from n/a to 2.1.3. An attacker can exploit this vulnerability to gain privileged access and potentially compromise websites using the affected plugin. It is recommended that users upgrade to the latest version of News Ticker for Elementor to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.