CVE-2024-8427

Summary

CVE-2024-8427 identifies a vulnerability in the Frontend Post Submission Manager Lite WordPress plugin, affecting all versions up to and including 1.2.2, which allows unauthorized data modification due to inadequate capability checks in the save_global_settings and process_form_edit functions. This flaw permits authenticated attackers with Subscriber-level access or higher to alter the plugin's settings and forms. The potential impact is categorized as medium severity, with an exploitability score of 2.8, indicating that an attacker could execute modifications without user interaction or complex requirements. To remediate this issue, organizations should update the plugin to a version following 1.2.2 that addresses these security concerns. Failure to resolve this vulnerability may lead to unintended alterations in site functionality and compromise data integrity within affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.