CVE-2024-12544

The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJSDeleteFile class in all versions up to, and includin...

CVE-2024-12544

creationtimestamp| type| source ---|---|--- 2025-03-01 08:27:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6059 2025-03-01 09:48:04+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114086542311660523 2025-03-01 10:35:34+00:00| seen|...

CVE-2024-12544

The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJSDeleteFile class in all versions up to, and includin...

CVE-2024-12544

Summary (supported by provided docs): CVE-2024-12544 affects the SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress. The vulnerability arises from a missing capability check in the SurveyJS_DeleteFile callback, enabling an authenticated user with Subscriber-level access or higher t...

CVE-2024-12544 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile

The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJSDeleteFile class in all versions up to, and includin...