CVE-2024-8483

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Sep 25, 2024
Updated: Oct 2, 2024
CWE ID 200

Summary

CVE-2024-8483 is a newly disclosed vulnerability affecting the MAS Static Content plugin for WordPress. This issue, which can be exploited by authenticated attackers with contributor-level access or higher, allows the extraction of sensitive information from private static content pages. The vulnerability lies within the static_content() function and poses a significant risk to websites running this plugin in all versions up to 1.0.8. To mitigate this threat, WordPress users are strongly advised to update the plugin to the latest available version as soon as possible.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share