TI-2024-09177 CVE-2024-9891 · GHSA-xrf4-hw94-x283
Missing authorization in zluck MultiLine Files for Contact Form 7
Priority LOW 20
The Multiline files upload for contact form 7 plugin for WordPress is vulnerable to unauthorized plugin deactivation due to a missing capability check on the mfcf7_zl_custom_handle_deactivation_plugin_form_submission() f…