Privilege Escalation Vulnerability in Contact Form 7 Plugin for WordPress

Privilege Escalation Vulnerability in Contact Form 7 Plugin for WordPress

CVE-2018-20979 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.

Learn more about our Wordpress Pen Testing.