CVE-2024-7782: Arbitrary File Access in Contact Form by Bit Form

The primary impact of CVE-2024-7782 is the potential for remote code execution (RCE) on WordPress servers. An authenticated administrator can exploit this vulnerability by deleting critical files, such as wp-config.php. Deleting wp-config.php effectively disables the WordPress site and allows an attacker to potentially gain control of the server. The arbitrary file deletion capability extends beyond just wp-config.php; an attacker could delete other configuration files, binaries, or even system files, depending on file system permissions. This represents a significant security risk, as it could lead to complete server compromise and data exfiltration.

1. Reserved2024-08-13
2. Published2024-08-20
3. Modified2024-09-03
4. EPSS updated2026-04-02

The primary mitigation for CVE-2024-7782 is to upgrade the Contact Form by Bit Form plugin to a version that addresses the vulnerability. The vendor has not specified a fixed version in the provided data. If upgrading is not immediately feasible, consider implementing temporary workarounds. Restrict file system permissions for the WordPress user to minimize the impact of a successful exploit. Implement a Web Application Firewall (WAF) with rules to block suspicious file deletion requests targeting the iconRemove function. Regularly monitor WordPress logs for unusual file access or deletion activity.

Plugin rating