Skip to content
OpenAdvisories

Vendor

zluck

1 known vulnerabilities.

Products

MultiLine Files for Contact Form 7 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2024-9891

    Multiline files upload for contact form 7 <= 2.8.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Deactivation

    The Multiline files upload for contact form 7 plugin for WordPress is vulnerable to unauthorized plugin deactivation due to a missing capability check on the mfcf7_zl_custom_handle_deactivation_plugin_form_submission() function in all versions up to, and incl…

    zluck MultiLine Files for Contact Form 7 Web / CMS