The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.

Published Aug 22, 2019 · Updated Aug 5, 2024 · Assigned by mitre