CVE-2024-1400mediumCWE-862

CVE-2024-1400: medium-severity vulnerability in ndijkstra Mollie Forms

Mollie Forms <= 2.6.3 - Missing Authorization to Arbitrary Post Duplication

Published · Updated

Follow this CVE+ Monitor Mollie Forms

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.3%
The Mollie Forms plugin for WordPress is vulnerable to unauthorized post or page duplication due to a missing capability check on the duplicateForm function in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with subscriber access or higher, to duplicate arbitrary posts and pages.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected products
ndijkstra · Mollie Forms
Related CVEs — ndijkstra Mollie Forms

In the same product, most dangerous first.

CVE-2024-1645MEDIUMMollie Forms <= 2.6.3 - Missing AuthorizationEPSS 0.5%CVE-2024-2368MEDIUMMollie Forms <= 2.6.13 - Cross-Site Request Forgery to Arbitrary Post DuplicationEPSS 0.2%