CVE-2024-13637
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 2, 2025
CWE ID 862
Summary
CVE-2024-13637 is a vulnerability affecting the Demo Awesome plugin for WordPress. This issue arises from a missing capability check on the install_plugin function, which exists in all versions up to and including 1.0.3. Consequently, authenticated attackers with Subscriber-level access or higher can install and activate unauthorized plugins, posing a significant security risk. This vulnerability allows for unauthorized data modification and potential exploitation of the WordPress platform.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.