CVE-2024-8548

Summary

CVE-2024-8548 is a vulnerability affecting the KB Support – WordPress Help Desk and Knowledge Base plugin. Unauthorized modifications and data loss can occur due to a missing capability check in several functions, impacting all versions up to 1.6.6. Authenticated attackers, including those with Subscriber-level access, can exploit this issue to perform administrative actions, such as updating post statuses, deleting posts, adding notes to tickets, and managing ticket participants. These actions can lead to significant security implications and potential data loss.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.