CVE-2024-5857

CVSS V2 None CVSS V3 None
Description
The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the af2_handel_file_remove AJAX action in all versions up to, and including, 3.7.3.2. This makes it possible for unauthenticated attackers to delete arbitrary media files.
Overview
  • CVE ID
  • CVE-2024-5857
  • Assigner
  • Wordfence
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-08-29T03:30:44.662Z
  • Last Modified Date
  • 2024-08-29T03:30:44.662Z
History
Created Old Value New Value Data Type Notes
2024-08-29 13:05:25 Added to TrackCVE