CVE-2024-9529: Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution
The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced Custom Fields Pro WordPress plugin before 6.3.9 does not prevent users from running arbitrary functions through its setting import functionalities, which could allow high privilege users such as admin to run arbitrary PHP functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9529?
CVE-2024-9529 has a high severity rating due to its potential to allow arbitrary function execution.
How do I fix CVE-2024-9529?
To fix CVE-2024-9529, update the Secure Custom Fields plugin to version 6.3.9 or the Advanced Custom Fields Pro plugin to version 6.3.9.
What are the affected versions for CVE-2024-9529?
CVE-2024-9529 affects Secure Custom Fields versions before 6.3.9 and Advanced Custom Fields Pro versions before 6.3.9.
What is the impact of CVE-2024-9529?
The impact of CVE-2024-9529 includes the risk of arbitrary code execution which could lead to unauthorized access or data loss.
Is CVE-2024-9529 actively exploited in the wild?
As of now, there is no confirmed information about active exploitation of CVE-2024-9529 in the wild.