CVE-2024-9461

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Nov 26, 2024
CWE ID 78

Summary

CVE-2024-9461 is a Remote Code Execution vulnerability affecting the Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid. The issue exists in all versions up to 1.16.6 and is triggered through the cron_interval parameter. This vulnerability arises due to insufficient input validation and sanitization, providing authenticated attackers, including those with Administrator-level access, the ability to execute arbitrary code on the affected server.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share