CVE-2024-1092
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Feb 5, 2024
Updated: Feb 13, 2024
CWE ID 862
Summary
CVE-2024-1092: A vulnerability has been identified in the Feedzy – Feed to Post plugin for WordPress, specifically in its RSS Aggregator feature. This issue allows authenticated attackers, with contributor access or higher, to manipulate feed categories unchecked on the dashboard, leading to unauthorized data modification in versions up to 4.4.1.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share