CVE-2024-22347

Summary

CVE-2024-13536: The 1003 Mortgage Application plugin for WordPress, up to version 1.87, suffers from a Full Path Disclosure vulnerability. The issue arises due to the publicly accessible /inc/class/fnm/export.php file, which has error logging enabled. This disclosure enables unauthenticated attackers to retrieve the web application's full path. While the information alone is not damaging, it can be harmful when combined with another vulnerability, putting affected websites at risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.