CVE-2024-7434

Summary

CVE-2024-7434 is a vulnerability affecting the UltraPress theme for WordPress. This issue allows authenticated attackers, with Contributor-level access and above, to inject PHP Objects through deserialization of untrusted input. No Pop chain has been identified in the vulnerable software, but one may exist with the installation of additional plugins or themes. This vulnerability can potentially enable the attacker to delete files, access sensitive data, or execute arbitrary code. WordPress users are urged to update the UltraPress theme to a version beyond 1.2.1 to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.