Threat Entry Updated 2024-12-07

CVE-2024-12026 - Cf7 Message Filter Plugin

The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveFilter() function in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new filters.

PLUGIN Cf7 Message Filter

CVE-2024-12026

MEDIUM CVSS 4.3 2024-12-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-12-06

CVE-2024-12027 - Cf7 Message Filter Plugin

The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateFilter() and deleteFilter() functions in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to update and delete filters.

PLUGIN Cf7 Message Filter

CVE-2024-12027

MEDIUM CVSS 4.3 2024-12-06

Risk Score

Open Full Technical Breakdown