PT-2024-18299
CVE-2024-1778
·
تاريخ النشر
2024-02-23
·
تاريخ التحديث
2025-01-16
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Contact Form 7 plugin for WordPress versions up to, and including, 1.1.1
Description
The Admin side data storage is vulnerable to unauthorized modification of data due to a missing capability check on the
zt dcfcf change bookmark() function. This makes it possible for unauthenticated attackers to alter bookmark statuses.Recommendations
For versions up to, and including, 1.1.1, consider disabling the
zt dcfcf change bookmark() function until a patch is available to prevent unauthorized modification of data. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾