CVE-2024-5599

Summary

CVE-2024-5599 is a vulnerability found in the FileOrganizer - Manage WordPress and Website Files plugin for WordPress. This vulnerability affects all versions up to and including 1.0.7 of the plugin. The vulnerability allows unauthenticated attackers to exploit the 'fileorganizer_ajax_handler' function, resulting in sensitive information exposure. Attackers can extract sensitive data, such as backups or other sensitive information, if the files have been moved to the built-in Trash folder. The vulnerability poses a high risk to organizations as it has a base severity rating of HIGH and a base score of 7.5 according to [email protected], indicating significant potential for confidentiality impact. The exploitability score is 3.9 out of 10, suggesting a moderate level of difficulty for attackers to exploit this vulnerability. Remediation should involve updating the plugin to a version that addresses the vulnerability or finding an alternative solution to FileOrganizer if an update is not available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.