CVE-2024-3269

Summary

CVE-2024-3269 is a vulnerability affecting the Download Monitor plugin for WordPress. This issue arises from the lack of capability checks on the dlm_uninstall_plugin function, present in all versions up to 4.9.13. Consequently, authenticated attackers are able to exploit this vulnerability to uninstall the plugin and delete its data, potentially disrupting website functionality or compromising data integrity. This flaw poses a significant risk for WordPress sites using the Download Monitor plugin and requires immediate attention and patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.