CVE-2024-12885

creationtimestamp| type| source ---|---|--- 2025-01-25 07:58:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113887931249885284 2025-01-25 08:05:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3065 2025-01-25 10:28:47+00:00| seen| https://t.me/cvedetector/16372...

CVE-2024-12885

The CVE-2024-12885 entry concerns the WordPress plugin Connections Business Directory. Affected versions: all up to 10.4.66. Root cause: insufficient file path validation when deleting the Connections Images directory, enabling an authenticated attacker with Administrator+ privileges to delete ar...