CVE-2024-12027

Summary

CVE-2024-12027 is a vulnerability affecting the Message Filter component of the Contact Form 7 plugin for WordPress. The issue lies in the lack of capability checks on the updateFilter() and deleteFilter() functions, which are available in all versions up to 1.6.3. Consequently, authenticated attackers with subscriber-level access or higher can exploit this vulnerability to update or delete filters unauthorizedly, posing a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.