CVE-2024-8126
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Sep 26, 2024
Updated: Oct 1, 2024
CWE ID 434
Summary
CVE-2024-8126: The Advanced File Manager plugin for WordPress, before version 5.2.9, contains a vulnerability that allows authenticated attackers with Subscriber-level access or higher to upload a new .htaccess file via the 'class_fma_connector.php'. This upwardly revised file access can potentially grant the attacker the ability to upload arbitrary files on the compromised site's server, increasing the risk of remote code execution.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.