CVE-2024-1400

Summary

CVE-2024-1400 is a vulnerability affecting the Mollie Forms plugin for WordPress. This issue allows authenticated attackers, including those with subscriber access or higher, to unauthorized duplicate posts and pages. The vulnerability arises from a missing capability check in the plugin's duplicateForm function, which is present in all versions up to 2.6.3. Successful exploitation of this vulnerability can result in significant data loss and unauthorized modification of content. To mitigate this risk, it is recommended that users of the Mollie Forms plugin upgrade to the latest available version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.