Vulnerability · Published Mar 21, 2022 · Assigned by WPScan
CVE-2021-24905Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion
High 8.0
In plain English
A high-severity incorrect authorization in Advanced Contact form 7 DB from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Official description
The Advanced Contact form 7 DB WordPress plugin before 1.8.7 does not have authorisation nor CSRF checks in the acf7_db_edit_scr_file_delete AJAX action, and does not validate the file to be deleted, allowing any authenticated user to delete arbitrary files on the web server. For example, removing the wp-config.php allows attackers to trigger WordPress setup again, gain administrator privileges and execute arbitrary code or display arbitrary content to the users.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Advanced Contact form 7 DB | 1.8.7 – before 1.8.7 |
Weakness: CWE-863