CVE-2024-8513

Summary

CVE-2024-8513 is a vulnerability affecting the QA Analytics – Web Analytics Tool with Heatmaps & Session Replay Across All Pages plugin for WordPress. The issue lies in the ajax_save_plugin_config() function, which lacks sufficient capability checks. Consequently, unauthenticated attackers can exploit this vulnerability to modify the plugin's settings, leading to unauthorized data manipulation. This vulnerability puts WordPress sites using this plugin version 4.1.0.0 and below at risk. It is crucial that users upgrade to the latest plugin version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.