CVE-2024-1129

The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the set_starred() function in all versions up to, and including, 8.5.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to mark records as starred.

• CWE-862
• CWE-862

• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1493Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1512Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1539Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1490Product
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1502Product
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1524Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/53db0f72-3353-42bb-ad75-4c5aa32d7939?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1493Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1512Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/tags/8.5.7/includes/classes/class.dashboard.php#L1539Patch
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1490Product
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1502Product
• https://plugins.trac.wordpress.org/browser/nex-forms-express-wp-form-builder/trunk/includes/classes/class.dashboard.php#L1524Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/53db0f72-3353-42bb-ad75-4c5aa32d7939?source=cveThird Party Advisory

Published

Feb 29, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11284The WP JobHunt plugin for WordPress is vulnerable to privile…9.8
• CVE-2024-11285The WP JobHunt plugin for WordPress is vulnerable to privile…9.8
• CVE-2024-11286The WP JobHunt plugin for WordPress is vulnerable to authent…9.8
• CVE-2024-11287The Ebook Store plugin for WordPress is vulnerable to Reflec…6.1
• CVE-2024-11288Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-11289The Soledad theme for WordPress is vulnerable to Local File …8.1
• CVE-2024-11290The Member Access plugin for WordPress is vulnerable to Sens…5.3
• CVE-2024-11291The Paid Membership Subscriptions – Effortless Memberships, …5.3
• CVE-2024-11292The WP Private Content Plus plugin for WordPress is vulnerab…5.3
• CVE-2024-11293The Registration Forms – User Registration Forms, Invitatio…8.1
• CVE-2024-11294The Memberful plugin for WordPress is vulnerable to Sensitiv…5.3
• CVE-2024-11295The Simple Page Access Restriction plugin for WordPress is v…5.3