CVE-2024-9529: Secure Custom Fields < 6.3.6.3 - Admin+ Remote Code Execution
First published: Fri Nov 15 2024(Updated: )
The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced Custom Fields Pro WordPress plugin before 6.3.9 does not prevent users from running arbitrary functions through its setting import functionalities, which could allow high privilege users such as admin to run arbitrary PHP functions.
Credit: contact@wpscan.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Secure Custom Fields | <6.3.9<6.3.6.3 | |
| Advanced Custom Fields Pro | <6.3.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-9529?
CVE-2024-9529 has a high severity rating due to its potential to allow arbitrary function execution.
How do I fix CVE-2024-9529?
To fix CVE-2024-9529, update the Secure Custom Fields plugin to version 6.3.9 or the Advanced Custom Fields Pro plugin to version 6.3.9.
What are the affected versions for CVE-2024-9529?
CVE-2024-9529 affects Secure Custom Fields versions before 6.3.9 and Advanced Custom Fields Pro versions before 6.3.9.
What is the impact of CVE-2024-9529?
The impact of CVE-2024-9529 includes the risk of arbitrary code execution which could lead to unauthorized access or data loss.
Is CVE-2024-9529 actively exploited in the wild?
As of now, there is no confirmed information about active exploitation of CVE-2024-9529 in the wild.
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/trending
- agent/epss
- collector/epss-latest
- source/FIRST
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/secure custom fields
- canonical/secure custom fields
- vendor/advanced custom fields
- canonical/advanced custom fields pro