CVE-2024-9224

Summary

CVE-2024-9224 is a vulnerability affecting the Hello World plugin for WordPress. This issue allows authenticated attackers, with subscriber-level access or higher, to perform Arbitrary File Reading. The vulnerability exists within the hello_world_lyric() function, and as a result, attackers can read the contents of arbitrary files on the affected server, potentially gaining access to sensitive information. Versions of the plugin up to, and including, 2.1.1 are reportedly impacted. WordPress users are advised to update the Hello World plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.