CVE-2024-4319 Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure

The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vszcf7exporttoexcel' function in versions up to, and including, 2.0.2. This makes it possible for unauthenticated attackers to download the entry data for...

WordPress Advanced Contact form 7 DB Plugin <= 2.0.2 is vulnerable to Broken Access Control

Software Advanced Contact form 7 DB Type Plugin Vulnerable versions = 2.0.2 Fixed in 2.0.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4319 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a460baa24d42 Credits 1337Wannabe Require...