CVE-2024-33629

Summary

CVE-2024-33629 is a newly identified Server-Side Request Forgery (SSRF) vulnerability affecting the Creative Motion Auto Featured Image (Auto Post Thumbnail) plugin, versions n/a through 4.0.0. Maliciously crafted requests can trick the server into loading arbitrary content, potentially leading to unauthorized data access or server misconfiguration. This poses a significant risk to WordPress sites using the vulnerable plugin, necessitating immediate patching to mitigate potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.