critical9.8
CVE-2018-20979
The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.
Impact
The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rocklobster | Contact Form 7 | before 5.0.4 |