CVE-2024-1400

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Mar 11, 2024
Updated: Mar 12, 2024

Summary

CVE-2024-1400 is a vulnerability in the Mollie Forms plugin for WordPress, affecting all versions up to and including 2.6.3. The vulnerability allows authenticated attackers with subscriber access or higher to duplicate arbitrary posts and pages, due to a missing capability check on the duplicateForm function. The risk score for this vulnerability is 5 out of 10, indicating a medium severity. The exploitability score is 2.8 out of 10, suggesting a low level of exploitability. The impact score is 1.4 out of 10, indicating a low integrity impact and no confidentiality impact. The attack vector is through the network, and no user interaction is required. There is no availability impact associated with this vulnerability. It is recommended to update the Mollie Forms plugin to the latest version to remediate this vulnerability and prevent unauthorized duplication of posts and pages by attackers with subscriber access or higher.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1400 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options