PT-2024-18026
CVE-2024-1416
·
تاريخ النشر
2024-05-02
·
تاريخ التحديث
2024-05-02
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress versions prior to 1.8.9
Description
The issue allows unauthorized access to functionality due to a missing capability check on several functions. This makes it possible for unauthenticated attackers to invoke those functions.
Recommendations
For versions prior to 1.8.9, update to a version that includes the necessary capability checks to prevent unauthorized access.
As a temporary workaround, consider restricting access to the affected functions until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾