CVE-2018-20979

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-22

Last modified

2024-08-05

Affected products

• Contact Form 7 (Rocklobster)

References

• https://wordpress.org/plugins/contact-form-7/#developers