CVE-2024-8352
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 3, 2024
Updated: Oct 8, 2024
CWE ID 22
Summary
CVE-2024-8352 is a directory traversal vulnerability affecting the Social Media Auto Post and Social Media Auto Publish plugins for WordPress, versions up to 4.1.11. The issue lies within the download_log function, which enables unauthenticated attackers to read the contents of arbitrary files on the server. These files can contain sensitive information, posing a significant security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.