{"uuid": "99c72cde-cbb0-4af7-ab8d-9c865a28a36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-6386", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/19010", "content": "The Hacker News\nCritical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution\n\nA critical security flaw has been disclosed in the WPML WordPress multilingual plugin that could allow authenticated users to execute arbitrary code remotely under certain circumstances.\nThe vulnerability, tracked as CVE-2024-6386 (CVSS score: 9.9), impacts all versions of the plugin before 4.6.13, which was released on August 20, 2024.\nArising due to missing input validation and sanitization,", "creation_timestamp": "2024-08-28T10:04:52.000000Z"}