Rewterz
Rewterz Threat Update –Unpatched Fortinet Vulnerabilities
August 20, 2021
Rewterz
Rewterz Threat Alert – CryptBot Trojan – Active IOCs
August 20, 2021

Rewterz Threat Advisory –CVE-2021-24145 – WordPress Code Execution Vulnerability

Severity

High

Analysis Summary

CVE-2021-24145

A remote code execution vulnerability exists in WordPress Modern Events Calendar Plugin. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.

Impact

  • Code Execution
  • Unauthorized Access

Affected Vendors

WordPress

Affected Products

  • WordPress Modern Events Calendar Plugin before 5.16.5

Remediation

Upgrade to the latest version of WordPress available from the WordPress Plugin Directory

https://www.checkpoint.com/defense/advisories/public/2021/cpai-2021-0496.html#protection.