CVE-2024-8420 — DHVC Form <= 2.4.7 - Unauthenticated Privilege Escalation
The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7. This is due to the plugin allowing a user to supply the 'ro…
Published: 2025-02-28 · CVSS: 9.8 · CVSS 3.1
The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on sites.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7