CVE-2024-54380

Summary

CVE-2024-54380 is a newly disclosed path traversal vulnerability affecting WP Cookies Enabler, a popular WordPress plugin. The flaw, which allowsPHP Local File Inclusion, occurs due to the plugin's failure to properly limit file path access. An attacker can exploit this vulnerability to include and execute arbitrary PHP files on affected systems. The issue affects WP Cookies Enabler versions from n/a through 1.0.1. It is essential to update the plugin to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.