CVE-2024-12184 in Contact Forms Plugin정보

요약

\~에 의해 MITRE • 2025. 02. 01.

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download other user submitted forms.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

Wordfence

예약하다

2024. 12. 04.

공개

2025. 02. 01.

모더레이션

수락

항목

VDB-294329

CPE

준비됨

CWE

CWE-862 (확인됨)

CVSS

5.3 (CNA)

EPSS

0.00383

KEV

아니요

활동

매우 낮음

부문

Hostingprovider

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-12184
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-12184
CVE Details	https://www.cvedetails.com/cve/CVE-2024-12184/

◂ 이전 개요 다음 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!