Vulnerabilitycritical

Critical WordPress Anti-Spam Plugin Flaws Expose 200,000+ Sites to Remote Attacks

The Hacker Newsby @TheHackersNewsDec 2, 2024 · 04:54 UTC (Dec 2, 2024)1 min read1 · 1 read

Read at thehackernews.com

Analyze CVE-2024-10542 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-10542 CVE-2024-10781

Tags: cve-2024-10542 cve-2024-10781 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-10542 +1 related CVE CVE-2024-10781	The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization…	7.5	15%		Nov 26, 2024

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  Nov 26, 2024 Vulnerability / Website Security Two critical security flaws impacting the Spam protection, Anti-Spam, and FireWall plugin for WordPress could allow an unauthenticated attacker to install and enable malicious plugins on susceptible sites and potentially achieve remote code execution. The vulnerabilities, tracked as CVE-2024-10542 and CVE-2024-10781 , carry a CVSS score of 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.