PT-2024-13210

CVE-2023-45009

·

تاريخ النشر

2024-06-04

·

تاريخ التحديث

2024-06-04

الوصف من

CVSS 3.1
5.3
متوسطة
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Captcha/Honeypot for Contact Form 7 versions 1.11.3 and earlier
Description The issue is related to an Improper Restriction of Excessive Authentication Attempts, allowing Functionality Bypass. This means that the Captcha/Honeypot for Contact Form 7 does not properly restrict excessive authentication attempts, which can lead to bypassing its functionality.
Recommendations For versions 1.11.3 and earlier, as a temporary workaround, consider disabling the Captcha/Honeypot functionality until a patch is available. Restrict access to the Captcha/Honeypot module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾