CVE-2024-56247
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Jan 2, 2025
Updated: Feb 7, 2025
CWE ID 89
Summary
CVE-2024-56247 is a new SQL Injection vulnerability affecting the WP Post Author plugin used in AF themes. The flaw stems from the plugin's failure to properly neutralize special elements in SQL commands. An attacker can exploit this vulnerability to execute arbitrary SQL statements, potentially leading to data theft or unauthorized access to the affected WordPress sites. The issue spans from the unspecified version n/a to 3.8.2, making it critical for users to update their plugins promptly to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.