CVE-2024-6120

Summary

CVE-2024-6120 is a vulnerability affecting the Sparkle Demo Importer plugin for WordPress. The issue lies in the lack of capability checks on multiple functions, allowing authenticated attackers with Subscriber-level access or higher to perform unauthorized database resets and demo data imports. Consequences include deletion of all posts, pages, and uploaded files, as well as the ability to download and install a restricted set of demo plugins.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.