CVE-2024-9503

Summary

CVE-2024-9503 is a vulnerability affecting the Maintenance & Coming Soon Redirect Animation plugin for WordPress. This issue allows authenticated attackers, with access equal to or greater than Subscriber level, to unauthorizedly modify certain plugin settings without proper capability checks on functions including 'wploti_add_whitelisted_roles_option', 'wploti_remove_whitelisted_roles_option', 'wploti_add_whitelisted_users_option', 'wploti_remove_whitelisted_users_option', and 'wploti_uploaded_animation_save_option'. These functions are missing capability checks, enabling attackers to modify plugin settings, potentially leading to serious consequences. Versions up to and including 2.1.3 of the plugin are affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.