Skip to content
OpenAdvisories

Vendor

mahendrapatidarmp

1 known vulnerabilities.

Products

Custom Skins Contact Form 7 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2024-12341

    Custom Skins Contact Form 7 <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Update and Skin Creation

    The Custom Skins Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cf7cs_action_callback' function in all versions up to, and including, 1.0. This makes it possible for authenticat…

    mahendrapatidarmp Custom Skins Contact Form 7 Web / CMS