Adobe And WordPress Face Critical Security Threats


Critical software security vulnerabilities have emerged across major platforms, raising alarms for users everywhere. Adobe has patched a high-severity vulnerability affecting its ColdFusion platform, alongside the discovery of several serious flaws across popular WordPress plugins.

Adobe’s vulnerability, tracked as CVE-2024-53961, is characterized as a path traversal flaw found within ColdFusion versions 2021 and 2023. Rated with a severity score of 7.4, this issue allows attackers to exploit it for unauthorized access to files or directories outside the designated restricted areas. According to the National Institute of Standards and Technology (NIST), “An attacker could exploit this vulnerability to access files or directories… outside of the restricted directory set by the application.” With proof-of-concept code already available, Adobe has issued urgent recommendations for users to patch this vulnerability as quickly as possible.



Read more

Posted in Wordpress