Vulnerabilities > Contact Form Advanced Database Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-12-13 | CVE-2021-24790 | Missing Authorization vulnerability in Contact Form Advanced Database Project Contact Form Advanced Database 1.0.8 The Contact Form Advanced Database WordPress plugin through 1.0.8 does not have any authorisation as well as CSRF checks in its delete_cf7_data and export_cf7_data AJAX actions, available to any authenticated users, which could allow users with a role as low as subscriber to call them. | 4.3 |