CVE-2024-51817

Summary

CVE-2024-51817 is a Missing Authorization vulnerability affecting the CodeZel Combo WP Rewrite Slugs plugin. This issue arises due to incorrectly configured access control security levels, which enable unauthorized exploitation. The vulnerability affects versions of the plugin from n/a through 1.0, putting WordPress sites using these versions at risk. Attackers can potentially manipulate rewrite slugs, resulting in unintended actions or unauthorized access to sensitive information. WordPress users are urged to update their CodeZel Combo WP Rewrite Slugs plugin to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.