CVE-2024-9860

A security flaw exists in the Bridge Core plugin for WordPress, affecting versions prior to and including 3.3. The issue arises from a lack of permission checks on specific functions, enabling attackers with subscriber-level access or higher to manipulate plugin configurations, import demo content, and install restricted plugins. This vulnerability poses a risk of unauthorized data modification or loss.

Based on public CVE data (MITRE/NVD).