CVE-2024-0907

The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the restore_records() function in all versions up to, and including, 8.5.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to restore records.

• CWE-862
• CWE-862

• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1493Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1512Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1539Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1490Product
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1502Product
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1524Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/26bd4058-ef00-48c8-8ab5-01535f0238a4?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1493Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1512Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1539Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1490Product
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1502Product
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1524Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/26bd4058-ef00-48c8-8ab5-01535f0238a4?source=cveThird Party Advisory

Published

Feb 29, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0901Remotely executed SEGV and out of bounds read allows malicio…9.1
• CVE-2024-0902The Fancy Product Designer WordPress plugin before 6.1.81 do…4.8
• CVE-2024-0903The User Feedback – Create Interactive Feedback Form, User S…6.1
• CVE-2024-0904The Fancy Product Designer WordPress plugin before 6.1.81 do…5.9
• CVE-2024-0905The Fancy Product Designer WordPress plugin before 6.1.8 doe…6.3
• CVE-2024-0906The f(x) Private Site plugin for WordPress is vulnerable to …5.3
• CVE-2024-0908The Advanced Post Block – Display Posts, Pages, or Custom Po…5.3
• CVE-2024-0909The Anonymous Restricted Content plugin for WordPress is vul…7.5
• CVE-2024-0910The Restrict for Elementor plugin for WordPress is vulnerabl…5.3
• CVE-2024-0911A flaw was found in indent, a program for formatting C code.…5.5
• CVE-2024-0912Under certain circumstances the Microsoft® Internet Informat…4.2
• CVE-2024-0913The WP ERP | Complete HR solution with recruitment & job lis…7.2