CVE-2024-8857

Summary

CVE-2024-8857 is a vulnerability affecting the WordPress Auction Plugin before version 3.7. This issue arises due to insufficient sanitization and escaping of certain settings within the plugin. Consequently, high privilege users, such as editors, can execute Stored Cross-Site Scripting attacks and potentially gain unauthorized access to the affected WordPress site. This vulnerability poses a significant risk to websites utilizing the WordPress Auction Plugin and requires immediate attention and patching to mitigate potential threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.