CVE-2024-4605

The Breakdance plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.7.1 via post meta data. This is due to the plugin storing custom data in metadata without an underscore prefix. This makes it possible for lower privileged users, such as contributors, to edit this data via UI. As a result they can escalate their privileges or execute arbitrary code.

• CWE-94

• https://breakdance.com/breakdance-1-7-2-now-available-security-update/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/095b23b7-71ab-41eb-b666-73df2e1a7eb4?source=cve
• https://breakdance.com/breakdance-1-7-2-now-available-security-update/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/095b23b7-71ab-41eb-b666-73df2e1a7eb4?source=cve

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-46044CH22 V1.0.0.6(468) has a stack overflow vulnerability locate…9.8
• CVE-2024-46045Tenda CH22 V1.0.0.6(468) has a stack overflow vulnerability …9.8
• CVE-2024-46046Tenda FH451 v1.0.0.9 has a stack overflow vulnerability loca…9.8
• CVE-2024-46047Tenda FH451 v1.0.0.9 has a stack overflow vulnerability in t…7.5
• CVE-2024-46048Tenda FH451 v1.0.0.9 has a command injection vulnerability i…9.8
• CVE-2024-46049Tenda O6 V3.0 firmware V1.0.0.7(2054) contains a stack overf…9.8
• CVE-2024-46054OpenVidReview 1.0 is vulnerable to Incorrect Access Control.…9.8
• CVE-2024-46055OpenVidReview 1.0 is vulnerable to Cross Site Scripting (XSS…4.8
• CVE-2024-4606Deserialization of Untrusted Data vulnerability in BdThemes …5.4
• CVE-2024-46060Anaconda3 macOS installers before 2024.06-1 contain a local …7.8
• CVE-2024-46062Miniconda3 macOS installers before 23.11.0-1 contain a local…7.8
• CVE-2024-4607Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel D…7.8