CVE-2024-9546
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Oct 15, 2024
Updated: Oct 17, 2024
CWE ID 200
Summary
CVE-2024-9546 is a vulnerability affecting the WPIDE – File Manager & Code Editor plugin for WordPress. The issue stems from the plugin's use of the PHP-Parser library, which inadvertently discloses the full path of the web application in parser rebuild command execution results. Unauthenticated attackers can exploit this vulnerability and retrieve the full path of the affected website. However, the information disclosed is not harmful on its own and would need to be combined with another vulnerability to cause damage to the targeted website.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.