Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0. The files contain directives to prevent the execution of certain scripts while allowing execution of known malicious PHP files. If moved outside of the plugin's directory, they may interfere with the proper function of a site.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2024-10938 WordPress OVRI Payment Plugin 1.7.0 Malicious .htaccess File Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-10938
Post summary
The post merely lists CVE-2024-10938 for the OVRI Payment Plugin with a brief reference to a malicious .htaccess file vulnerability, offering no further details, proof of concept, exploitation evidence, or mitigation guidance.
CVE-2024-10938 The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0. The files contain directives to prevent the execution of certain scripts wh… https://www.cve.org/CVERecord?id=CVE-2024-10938
Post summary
The OVRI Payment plugin for WordPress includes malicious .htaccess files in v1.7.0 that block script execution, indicating a discovered vulnerability.