CVE-2024-1668

Summary

CVE-2024-1668 is a vulnerability affecting the Avada | Website Builder For WordPress & WooCommerce theme. Versions up to and including 7.11.5 are susceptible to Sensitive Information Exposure. Authenticated attackers, with contributor access and above, can exploit this vulnerability by accessing the form entries page and view the contents of all form submissions. This includes fields that are normally obscured, such as the contact form's "password" field. The implications of this vulnerability are significant as it exposes sensitive user data, potentially leading to privacy breaches and other unintended consequences.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.