CVE-2024-6987

Summary

CVE-2024-6987 is a vulnerability affecting the Orchid Store theme for WordPress. The issue lies in the 'orchid_store_activate_plugin' function, which lacks proper capability checks. This flaw allows authenticated attackers with Subscriber-level access or higher to activate the Addonify Floating Cart For WooCommerce plugin, even if it is installed, leading to unauthorized modifications of data within the WordPress installation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.