Lucene search

CVE-2024-9629 Contact Form 7 + Telegram <= 0.8.5 - Missing Authorization to Authenticated (Subscriber+) Subscription Approve/Pause/Refuse

🗓️ 28 Oct 2024 17:55:31Reported by WordfenceType

Contact Form 7 + Telegram plugin vulnerabilit

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-9629	28 Oct 202418:15	–	nvd
Patchstack	WordPress Contact Form 7 Telegram Plugin <= 0.8.5 is vulnerable to Broken Access Control	28 Oct 202400:00	–	patchstack
CVE	CVE-2024-9629	28 Oct 202418:15	–	cve
Cvelist	CVE-2024-9629 Contact Form 7 + Telegram <= 0.8.5 - Missing Authorization to Authenticated (Subscriber+) Subscription Approve/Pause/Refuse	28 Oct 202417:31	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)	31 Oct 202415:37	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3176353/cf7-telegram
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/f330fa5a-b471-45ee-a2a6-3ae8f3941bfe
plugins	www.plugins.trac.wordpress.org/browser/cf7-telegram/tags/0.8.4/classes/wpcf7telegram.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Oct 2024 17:31Current

6.5Medium risk

Vulners AI Score6.5

CVSS35.4

EPSS0.0004

SSVC

CWE-862