Lucene search
WpvulndbWPVDB-ID:F988AFEA-60D1-481F-88EB-472C6A598FE2HistoryMay 15, 2024 - 12:00 a.m.
Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler < 1.6.5 - Missing Authorization via Several AJAX Action
2024-05-1500:00:00
wpscan.com
1
wordpress
plugin
cf7 wow styler
vulnerability
unauthorized access
capability checks
authenticated attackers
subscriber-level access
6.7 Medium
AI Score
Confidence
Low
Description The Design for Contact Form 7 Style WordPress Plugin – CF7 WOW Styler plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform several unauthorized actions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.6.5 |
Related
wordfence
wordfence