CVE-2024-8379

Summary

CVE-2024-8379 is a newly disclosed cybersecurity vulnerability affecting the Cost Calculator Builder WordPress plugin. Before version 3.2.29, this plugin fails to adequately sanitize and escape user input, making it susceptible to SQL injection attacks. An attacker can exploit this vulnerability by injecting malicious SQL commands, potentially leading to unauthorized access or data manipulation. Users with a role as low as Admin can carry out these attacks, posing a significant risk to websites utilizing the affected plugin. It is strongly recommended that users upgrade to the latest plugin version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.