Description:

CVE-2024-1330 is a vulnerability in the kadence-blocks-pro WordPress plugin that allows users with at least the contributor role to leak arbitrary options from the database using some of its shortcode functionalities. This vulnerability has a CVSS score of 4.3 and an SVRS of 51, indicating a moderate severity level.

Key Insights:

• Exploit Status: Active exploits have been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has warned of the vulnerability, calling for immediate and necessary measures.
• In The Wild: The vulnerability is actively exploited by hackers.
• Threat Actors/APT Groups: No specific threat actors or APT groups have been identified as actively exploiting this vulnerability.

Mitigation Strategies:

• Update the kadence-blocks-pro plugin to version 2.3.8 or later.
• Restrict access to the WordPress dashboard to only authorized users.
• Implement a web application firewall (WAF) to block malicious requests.
• Regularly monitor logs for suspicious activity.

Additional Information:

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.