Custom Contact Forms, 2765cc28b6069975626b406a82a133a70ed056b2

CVE, Research URL: 2765cc28b6069975626b406a82a133a70ed056b2
Home page URL: Security reports for Custom Contact Forms
Application: Custom Contact Forms
Published on: Sep 17, 2014
Research Description: Custom Contact Forms [custom-contact-forms] < 5.1.0.4 (closed) Custom Contact Forms <= 5.1.0.3 - Missing Authorization The Custom Contact Forms plugin for WordPress is vulnerable to authentication bypass due to missing capability checks on admin_init() function called via an 'init' hook in versions before 5.1.0.4. This makes it possible for unauthenticated attackers to download and modify the database of the affected site.
Affected versions: max 5.1.0.4.
Status: vulnerable