CVE-2024-5637

Summary

CVE-2024-5637 is a vulnerability affecting the Market Exporter plugin for WordPress. This issue allows authenticated attackers, with Subscriber-level access and above, to bypass capability checks on the 'remove_files' function. Consequently, attackers can exploit path traversal vulnerabilities to delete arbitrary files residing on the vulnerable server. This can result in unauthorized data loss, posing a significant security risk for WordPress websites using the Market Exporter plugin, versions up to and including 2.0.19.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.