CVE-2024-9224
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published: Oct 1, 2024 / Updated: 49d ago
010
CVSS 6.5EPSS 0.06%Medium
CVE info copied to clipboard
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the hello_world_lyric() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Timeline
First Article
Feedly found the first article mentioning CVE-2024-9224. See article
Oct 1, 2024 at 8:43 AM / Vulners.com RSS Feed
CVSS Estimate
Feedly estimated the CVSS score as MEDIUM
Oct 1, 2024 at 8:43 AM
CVE Assignment
NVD published the first details for CVE-2024-9224
Oct 1, 2024 at 9:15 AM
CVSS
A CVSS base score of 6.5 has been assigned.
Oct 1, 2024 at 9:20 AM / nvd
EPSS
EPSS Score was set to: 0.06% (Percentile: 25.6%)
Oct 2, 2024 at 10:19 AM
Affected Systems
Kau-boys/hello_world
+null more
Attack Patterns
CAPEC-126: Path Traversal
+null more
News
Exploit for Path Traversal in Kau-Boys Hello World exploit
RandomRobbieBF/CVE-2024-9224
[GitHub]Hello World <=2.1.1 - Authenticated (Subscriber+) Arbitrary File Read
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 30, 2024 to October 6, 2024)
All in-scope vulnerability types for WordPress plugins/themes with >= 1,000 active installations are in-scope for ALL researchers WordPress Plugins with Reported Vulnerabilities Last Week
CVE Alert: CVE-2024-9224 - https://www. redpacketsecurity.com/cve_aler t_cve-2024-9224/ # OSINT # ThreatIntel # CyberSecurity # cve_2024_9224
CVE Alert: CVE-2024-9224
Everyone that supports the site helps enable new functionality. The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the hello_world_lyric() function.
See 6 more articles and social media posts