CVE-2024-9529
CVSS 3.1 Score 6.6 of 10 (medium)
Details
Published Nov 15, 2024
Summary
CVE-2024-9529 is a vulnerability affecting the Secure Custom Fields plugin before version 6.3.9 and the Advanced Custom Fields Pro plugin before version 6.3.9 for WordPress. These plugins fail to restrict the import functionality, enabling high privilege users like administrators to execute arbitrary PHP functions, potentially leading to serious security breaches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.