CVE-2024-1945
CVE-2024-1945 affects the ARForms Form Builder plugin for WordPress, potentially leading to unauthorized data loss. This vulnerability stems from a missing capability check in the 'arflite_remove_preview_data' function. Authenticated attackers, with subscriber access or higher, can exploit this to delete arbitrary site options. The vulnerability impacts versions up to and including 1.6.4. While the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) is 30, and it's tagged as "In The Wild," suggesting potential exploitation. This could cause a loss of availability for affected WordPress sites. Addressing this security issue is important to prevent unauthorized data manipulation. Organizations using the ARForms plugin should update to a patched version to mitigate the risk.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.