CVE-2024-6297

published 2024-06-25

CVE-2024-6297: Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised the…

Priority P2 58 critical 10 CVSS 3.1

AV N AC L PR N UI N S C C H I H A H

Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised the source code of various plugins and injected code that exfiltrates database credentials and is used to create new, malicious, administrator users and send that data back to a server. Currently, not all plugins have been patched and we strongly recommend uninstalling the plugins for the time being and running a complete malware scan.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
blazeretail	blaze_retail_widget	2.2.5 – 2.5.2	—
pedrogusmao02	wrapper_link_elementor	1.0.2 – 1.0.3	—
stuartobrien	simply_show_hooks	1.2.1 – 1.2.2	—
themerex	contact_form_7_multi-step_addon	1.0.4 – 1.0.5	—
warfareplugins	social_sharing_plugin_social_warfare	4.4.6.4 – 4.4.7.1	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.