CVE-2024-43138

Summary

CVE-2024-43138 is a path traversal vulnerability affecting MagePeople Team Event Manager for WooCommerce. The issue arises due to improper limitation of a pathname, enabling an attacker to include PHP files locally. This can potentially lead to remote code execution. The affected version range is from n/a to 4.2.1. Users are advised to update to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.