PT-2022-22403 · WordPress · Wp Libre Form
CVSS v3.1
7.3
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
WP Libre Form plugin versions 2.0.0 through 2.0.8
Description
The issue allows attackers to disclose sensitive information and perform unauthorized actions, such as listing and deleting submissions, without proper authentication.
Recommendations
For WP Libre Form plugin versions 2.0.0 through 2.0.8, update to a version higher than 2.0.8 to resolve the issue.
Exploit
Fix
Exposure of Resource to Wrong Sphere
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Wp Libre Form