CVE-2024-33937
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-33937 is a critical vulnerability affecting Progressive WordPress (PWA), a progressive web app framework for WordPress. The issue involves missing authorization, enabling unauthorized users to access or modify protected data in versions 2.1.13 and below. This could potentially lead to sensitive information disclosure or data manipulation, posing a significant security risk to websites using the Progressive WordPress framework. It is strongly recommended that affected users upgrade to the latest available version as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.