CVE-2024-2782

Summary

CVE-2024-2782 is a vulnerability affecting the Contact Form Plugin by Fluent Forms used in Quiz, Survey, and Drag & Drop WP Form Builder for WordPress. The flaw, present in all versions up to 5.1.16, permits unauthenticated attackers to modify the plugin's settings through the /wp-json/fluentform/v1/global-settings REST API endpoint due to a missing capability check. This opens the door to unauthorized alterations, potentially leading to security breaches or functionality disruptions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.