CVE-2024-1778

Summary

CVE-2024-1778 is a vulnerability affecting the Contact Form 7 plugin for WordPress. The issue lies within the admin side data storage, where a missing capability check exists on the zt_dcfcf_change_bookmark() function. This oversight allows unauthenticated attackers to manipulate bookmark statuses, making it an unauthorized data modification vulnerability. Versions of Contact Form 7 up to and including 1.1.1 are susceptible to this weakness.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.