{"cvss":0.0,"datePublished":"2026-05-04T00:00:00Z","dateUpdated":"2026-05-04T00:00:00Z","description":"The DHVC Form plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.7. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on sites.","dueDate":"","id":"CVE-2024-8420","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"dhvc_form","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"sitesao dhvc_form Incorrect Privilege Assignment","vendor":"sitesao"}