CVE-2024-10855

Summary

CVE-2024-10855 is a vulnerability affecting the Sirv plugin for WordPress, specifically versions up to and including 7.3.0. This issue allows authenticated attackers with Contributor-level access or higher to manipulate filenames in the sirv_upload_file_by_chunks() function with insufficient validation. Consequently, they can delete arbitrary option values, potentially leading to denial of service by causing errors on the WordPress site for legitimate users. This vulnerability highlights the significance of proper input validation and access control in WordPress plugins to prevent unintended consequences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.