CVE-2024-56271
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 7, 2025
CWE ID 862
Summary
CVE-2024-56271 is a Missing Authorization vulnerability affecting WP SecureSubmit, a plugin used for secure form submissions in WordPress. The issue arises due to incorrectly configured access control security levels, allowing unauthorized users to exploit the vulnerability. This impacts WP SecureSubmit versions from n/a through 1.5.16, making it essential for users to update or patch their plugins as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.