CVE-2024-8855
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 7, 2025
CWE ID 89
Summary
CVE-2024-8855 is a vulnerability affecting the WordPress Auction Plugin before version 3.7. This issue arises due to the plugin's failure to sanitize and escape a user input parameter. An attacker with editor or higher privileges can exploit this flaw to execute SQL injection attacks, potentially leading to unauthorized access, data manipulation, or even complete system takeover. WordPress users are strongly advised to update the plugin to the latest version to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.