CVE-2024-9529

CVSS 3.1 Score 6.6 of 10 (medium)

Details

Published Nov 15, 2024

Summary

CVE-2024-9529 is a vulnerability affecting the Secure Custom Fields plugin before version 6.3.9 and the Advanced Custom Fields Pro plugin before version 6.3.9 for WordPress. These plugins fail to restrict the import functionality, enabling high privilege users like administrators to execute arbitrary PHP functions, potentially leading to serious security breaches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share