{"id":2944,"date":"2024-02-20T19:45:45","date_gmt":"2024-02-20T19:45:45","guid":{"rendered":"http:\/\/127.0.0.1\/constructor-de-formularios-de-contacto-con-arrastrar-y-soltar-para-wordpress-kali-forms-2-3-41-falta-de-autorizacion-para-la-desactivacion-arbitraria-de-plugins\/"},"modified":"2024-02-20T19:45:45","modified_gmt":"2024-02-20T19:45:45","slug":"constructor-de-formularios-de-contacto-con-arrastrar-y-soltar-para-wordpress-kali-forms-2-3-41-falta-de-autorizacion-para-la-desactivacion-arbitraria-de-plugins","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/constructor-de-formularios-de-contacto-con-arrastrar-y-soltar-para-wordpress-kali-forms-2-3-41-falta-de-autorizacion-para-la-desactivacion-arbitraria-de-plugins\/","title":{"rendered":"Constructor de Formularios de Contacto con arrastrar y soltar para WordPress – Kali Forms <= 2.3.41 – Falta de Autorizaci\u00f3n para la Desactivaci\u00f3n Arbitraria de Plugins"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad identificada en el plugin para WordPress ‘Contact Form builder with drag & drop for WordPress – Kali Forms’ hasta la versi\u00f3n 2.3.41 permite a atacantes autenticados, con acceso de suscriptor o superior, desactivar cualquier plugin activo de forma no autorizada. La funci\u00f3n await_plugin_deactivation carece de una verificaci\u00f3n de capacidades, lo que permite a […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[657],"class_list":["post-2944","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-1217"],"yoast_head":"\n