PT-2023-17275 · WordPress · Metform Elementor Contact Form Builder

Marco Wotschka

·

CVE-2023-1843

·

Publicado

2023-06-09

·

Atualizado

2023-06-16

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Name of the Vulnerable Software and Affected Versions Metform Elementor Contact Form Builder plugin for WordPress versions up to, and including, 3.3.0
Description The issue allows unauthorized updates to the permalink structure due to a missing capability check on the permalink setup function. This enables unauthenticated attackers to change the permalink structure.
Recommendations For versions up to, and including, 3.3.0, update to a version higher than 3.3.0 to resolve the issue.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2023-1843

Produtos afetados

Metform Elementor Contact Form Builder