Lucene search

Hive ProHIVEPRO:406989AE8D38CFB370CC80F7B2D984E5

HistoryMar 21, 2024 - 5:46 a.m.

Critical Flaw In WordPress Plugins Poses Risk Of Site Takeover

2024-03-2105:46:52

Hive Pro

www.hivepro.com

wordpress

security vulnerability

cve-2024-2172

miniorange

malware scanner

web application firewall

uninstall

administrative privileges

user password

threat level red

vulnerability report

hiveforce labs

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Summary: A critical security vulnerability, identified as CVE-2024-2172 in WordPress, urges users utilizing miniOrange's Malware Scanner and Web Application Firewall plugins to uninstall these plugins from their websites. This vulnerability enables unauthorized attackers to gain administrative privileges by altering the user password. Threat Level - Red | Vulnerability Report For a detailed threat advisory, download the pdf file here To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.