PT-2023-16460 · WordPress · Metform Elementor Contact Form Builder
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Metform Elementor Contact Form Builder for WordPress versions up to, and including, 3.3.1
Description
The issue allows authenticated attackers with subscriber-level capabilities or above to obtain sensitive information about the payment status of arbitrary form submissions via the
mf payment status shortcode.Recommendations
For versions up to, and including, 3.3.1, update to a version that contains a fix for this issue to prevent information disclosure.
Correção
IDOR
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Metform Elementor Contact Form Builder