CVE-2024-7621
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Aug 12, 2024
CWE ID 862
Summary
CVE-2024-7621 is a vulnerability affecting the Atarim plugin for WordPress. This issue allows authenticated attackers, with Subscriber-level access and above, to modify plugin settings due to a missing capability check on the process_wpfeedback_misc_options() function. Exploitation of this vulnerability can potentially grant attackers unauthorized access to the plugin's settings. Versions up to and including 4.0.2 are reportedly impacted. WordPress users are advised to update to the latest version of the Atarim plugin to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.