CVE-2024-9461
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Nov 26, 2024
CWE ID 78
Summary
CVE-2024-9461 is a Remote Code Execution vulnerability affecting the Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid. The issue exists in all versions up to 1.16.6 and is triggered through the cron_interval parameter. This vulnerability arises due to insufficient input validation and sanitization, providing authenticated attackers, including those with Administrator-level access, the ability to execute arbitrary code on the affected server.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share