PT-2024-12998
CVE-2023-41862
·
تاريخ النشر
2024-12-13
·
تاريخ التحديث
2024-12-17
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Very Simple Contact Form plugin versions prior to 13.9
VS Contact Form versions prior to 14.0
Description
The issue affects the Very Simple Contact Form plugin for WordPress, allowing a CAPTCHA bypass due to a Weak Authentication vulnerability. This enables Authentication Abuse. Users are urged to update to the latest version to mitigate risks.
Recommendations
For Very Simple Contact Form plugin versions prior to 13.9, update to the latest version to secure your site.
For VS Contact Form versions prior to 14.0, update to the latest version to protect against Authentication Abuse.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾