CVE-2024-56064

Summary

CVE-2024-56064 is a newly identified vulnerability in WP SuperBackup, a plugin used for creating backups in WordPress websites. This issue permits an unauthenticated attacker to upload any file type, including dangerous web shells, to the web server through the plugin. The vulnerability exists in WP SuperBackup versions from n/a to 2.3.3, making it a significant threat to websites using this plugin. Successful exploitation could lead to unauthorized access, data theft, and potentially severe website compromises. Upgrading to the latest version of WP SuperBackup, or using alternative backup solutions, is highly recommended to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.