CVE-2024-9223

Summary

CVE-2024-9223 is a vulnerability affecting the WPDash Notes plugin for WordPress. The issue lies in the 'wp_ajax_post_it_list_comment' function, which lacks the necessary capability check. This flaw allows authenticated attackers, with Subscriber-level access and above, to access comments on any post, including private, password-protected, pending, and draft posts, even if they were previously published. The vulnerability was partially addressed in version 1.3.5, but it is important for users to update to the latest version to ensure full protection.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.