The Contact Form builder with drag & drop for WordPress – Kali Forms plugin for WordPress is vulnerable to unauthorized plugin deactivation due to a missing capability check on the await_plugin_deactivation function in all versions up to, and including, 2.3.41. This makes it possible for authenticated attackers, with subscriber access or higher, to deactivate any active plugins.
References
Configurations
History
19 Jan 2025, 02:51
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Kaliforms contact Form Builder
Kaliforms |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://plugins.trac.wordpress.org/changeset/3036466/kali-forms/trunk?contextall=1&old=3029334&old_path=%2Fkali-forms%2Ftrunk - Patch | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/7be75b0a-737d-4f0d-b024-e207af4573cd?source=cve - Third Party Advisory | |
| CPE | cpe:2.3:a:kaliforms:contact_form_builder:*:*:*:*:*:wordpress:*:* |
21 Nov 2024, 08:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://plugins.trac.wordpress.org/changeset/3036466/kali-forms/trunk?contextall=1&old=3029334&old_path=%2Fkali-forms%2Ftrunk - | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/7be75b0a-737d-4f0d-b024-e207af4573cd?source=cve - |
29 Feb 2024, 01:43
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-29 01:43
Updated : 2025-01-19 02:51
NVD link : CVE-2024-1217
Mitre link : CVE-2024-1217
CVE.ORG link : CVE-2024-1217
JSON object : View
Products Affected
kaliforms
- contact_form_builder
CWE