CVE-2024-7382

Summary

CVE-2024-7382 is a newly disclosed vulnerability affecting the Linkify Text plugin for WordPress. Versions up to 1.9.1 of the plugin contain a Full Path Disclosure issue. This vulnerability arises due to the plugin utilizing bootstrap and leaving error display on, exposing test files. Unauthenticated attackers can exploit this flaw to obtain the full path of the web application. This information alone is not damaging but can aid further attacks when combined with another vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.