CVE-2024-9697

Summary

CVE-2024-9697 is a vulnerability affecting the Social Rocket – Social Sharing Plugin for WordPress. This issue allows authenticated attackers, with Subscriber-level access and above, to unauthorizedly modify plugin settings due to a missing capability check on the tweet_settings_save() and tweet_settings_update() functions. Versions up to and including 1.3.4 are impacted by this vulnerability. Successful exploitation of this weakness could lead to significant changes in the plugin's configuration, potentially disrupting the functionality of the website and jeopardizing its security. It is recommended that users update to the latest version of the plugin to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.