CVE-2024-12184

creationtimestamp| type| source ---|---|--- 2025-02-01 04:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np5fh7m2i 2025-02-01 05:25:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3714 2025-02-01 07:16:31+00:00| seen|...

CVE-2024-12184 WordPress Contact Forms by Cimatti <= 1.9.4 - Missing Authorization to Unauthenticated Form Submission Download

The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accuaformsdownloadsubmittedfile function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download...