CVE-2024-10913

Summary

CVE-2024-10913 is a vulnerability affecting the Clone plugin for WordPress. The issue lies in the 'recursive_unserialized_replace' function, which is vulnerable to PHP Object Injection due to deserialization of untrusted input. This weakness allows unauthenticated attackers to inject a PHP Object into the system. Without a known Pop chain, the attacker's capabilities are limited. However, if a Pop chain exists via an additional plugin or theme, the attacker could potentially delete arbitrary files, retrieve sensitive data, or execute code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.