Description:

CVE-2024-8624 is a SQL Injection vulnerability in the MDTF – Meta Data and Taxonomies Filter plugin for WordPress. It allows authenticated attackers with Contributor-level access or higher to execute arbitrary SQL queries on the database, potentially leading to sensitive information disclosure.

Key Insights:

• High Severity: The CVSS score of 9.9 indicates a critical vulnerability that requires immediate attention.
• SVRS of 34: While lower than the CVSS score, the SVRS of 34 still signifies a moderate risk, highlighting the need for prompt action.
• Active Exploitation: The vulnerability is actively exploited in the wild, making it imperative for organizations to patch their systems immediately.

Mitigation Strategies:

• Update WordPress: Install the latest version of WordPress (6.1.1) which includes a fix for this vulnerability.
• Disable the Plugin: If updating WordPress is not immediately possible, disable the MDTF plugin until a patch is available.
• Restrict Access: Limit access to the WordPress dashboard to only authorized users with the minimum necessary privileges.
• Implement Web Application Firewall (WAF): Configure a WAF to block malicious traffic and prevent SQL injection attacks.

Additional Information:

• Threat Actors/APT Groups: No specific threat actors or APT groups have been identified as actively exploiting this vulnerability.
• Exploit Status: Active exploits have been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has warned of this vulnerability, calling for immediate and necessary measures.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.