Skip to content
OpenAdvisories

Vendor

SiteSao

1 known vulnerabilities.

Products

DHVC Form 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-8420

    DHVC Form <= 2.4.7 - Unauthenticated Privilege Escalation

    The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers t…

    SiteSao DHVC Form Web / CMS