CVE-2024-1416

Name of the Vulnerable Software and Affected Versions The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress versions prior to 1.8.9

Description The issue allows unauthorized access to functionality due to a missing capability check on several functions. This makes it possible for unauthenticated attackers to invoke those functions.

Recommendations For versions prior to 1.8.9, update to a version that includes the necessary capability checks to prevent unauthorized access. As a temporary workaround, consider restricting access to the affected functions until a patch is available.