CVE-2024-8420 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7. This is due to the plugin allowing a user…
Critical CVSS: 9.8

CVE-2024-8420

The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on sites.
Vendor
Sitesao
Product
Dhvc Form
CWE
CWE-266
Yayın Tarihi
2025-02-28 09:15:10
Güncelleme
2025-03-06 16:47:52
Source Identifier
security@wordfence.com
KEV Date Added
-

Kategoriler

Referanslar