Unauthorized Data Modification in WordPress Maintenance & Coming Soon Redirect Animation Plugin

CVE-2024-9503

What is CVE-2024-9503?

CVE-2024-9503 is a critical security vulnerability affecting the Maintenance & Coming Soon Redirect Animation plugin for WordPress. This issue arises from a lack of proper capability checks in the plugin's functions – specifically 'wploti_add_whitelisted_roles_option', 'wploti_remove_whitelisted_roles_option', 'wploti_add_whitelisted_users_option', 'wploti_remove_whitelisted_users_option', and 'wploti_uploaded_animation_save_option'. Authenticated users with Subscriber-level access and above can exploit this vulnerability to modify crucial plugin settings, potentially compromising the integrity and security of the website. All versions up to and including v2.1.3 are impacted, necessitating immediate action to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References