CVE-2024-54384

Summary

CVE-2024-54384 is a Missing Authorization vulnerability affecting the Falcon – WordPress Optimizations & Tweaks plugin. The flaw enables unauthorized access to functionality, exploiting incorrectly configured access control security levels. This issue poses a risk to WordPress sites using the Falcon plugin versions from n/a to 2.8.3. Unauthorized users may gain privileged access, potentially leading to data theft or website manipulation. Users are advised to update to the latest plugin version and secure their access control settings.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.