Vulnerability · Published Dec 13, 2021 · Assigned by WPScan
CVE-2021-24790Contact Form Advanced Database <= 1.0.8 - Unauthorised AJAX Calls
Medium 4.3
In plain English
A medium-severity missing authorization in Contact Form Advanced Database from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Official description
The Contact Form Advanced Database WordPress plugin through 1.0.8 does not have any authorisation as well as CSRF checks in its delete_cf7_data and export_cf7_data AJAX actions, available to any authenticated users, which could allow users with a role as low as subscriber to call them. The delete_cf7_data would lead to arbitrary metadata deletion, as well as PHP Object Injection if a suitable gadget chain is present in another plugin, as user data is passed to the maybe_unserialize() function without being first validated.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Contact Form Advanced Database | 1.0.8 – through 1.0.8 |
Weakness: CWE-862