CVE-2024-1311

Summary

CVE-2024-1311: The Brizy Page Builder plugin for WordPress contains a vulnerability that allows authenticated attackers, with contributor access or above, to upload arbitrary files due to insufficient file type validation in the storeImages function. This issue exists in all versions up to and including 2.4.40, potentially enabling remote code execution on affected sites.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.