WordPress plugin Funnelforms Free 安全漏洞

🗓️ 29 Aug 2024 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 3 Views

Flaw in Funnelforms Free up to 3.7.3.2 causes data loss via missing af2_handel_file_remove check.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-5857	29 Aug 202413:42	–	circl
CVE	CVE-2024-5857	29 Aug 202403:30	–	cve
Cvelist	CVE-2024-5857 Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion	29 Aug 202403:30	–	cvelist
EUVD	EUVD-2024-47000	3 Oct 202520:07	–	euvd
NVD	CVE-2024-5857	29 Aug 202411:15	–	nvd
OSV	CVE-2024-5857	29 Aug 202411:15	–	osv
Patchstack	WordPress Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor - Funnelforms Free plugin <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion vulnerability	2 Feb 202607:50	–	patchstack
Positive Technologies	PT-2024-37196 · WordPress · Funnelforms Free	28 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5857	23 May 202508:29	–	redhatcve
Vulnrichment	CVE-2024-5857 Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Deletion	29 Aug 202403:30	–	vulnrichment

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/5cd0e015-abf2-4905-8b42-46b685be2c74
plugins	www.plugins.trac.wordpress.org/changeset/3141470/funnelforms-free/trunk/frontend/frontend.php
cxsecurity	www.cxsecurity.com/cveshow/CVE-2024-5857/

31 Dec 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.3

EPSS0.00317

SSVC

Funnelforms Free WordPress plugin data loss af2_handel_file_remove vulnerability