CVE-2024-13783

Summary

CVE-2024-13783 is a vulnerability affecting the FormCraft plugin for WordPress. This issue is caused by a missing capability check in the file formcraft-main.php, present in all versions up to 3.9.11. Consequently, authenticated attackers with Subscriber-level access or higher can exploit this flaw to gain unauthorized access to export all plugin data. The exported data may contain sensitive information derived from form submissions, increasing the risk of data breaches. WordPress users are urged to update their plugin to the latest version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.