{"uuid": "057df850-b8a2-4752-bf3d-8b6d0fc6b11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8672", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1162", "content": "CVE-2024-8672: Code Injection in Widget Options WordPress Plugin, 9.9 rating \ud83d\udd25\n\nThe vulnerability allows an attacker to enter data that is transmitted without proper filtering. This could potentially lead to remote code execution.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/xOEZp\n\ud83d\udc49 Dork: http.body:\"plugins/widget-options\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/widget-options/widget-options-the-1-wordpress-widget-block-control-plugin-407-authenticated-contributor-remote-code-execution", "creation_timestamp": "2026-07-11T16:00:03.067744Z"}