CVE-2024-0975

Summary

CVE-2024-0975 is a vulnerability affecting the WordPress Access Control plugin, which can be exploited by unauthenticated attackers. The issue lies in the plugin's REST API, enabling attackers to bypass the "Make Website Members Only" feature and gain unauthorized access to restricted page and post content. Versions up to 4.0.13 are affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.