PT-2023-16462
CVE-2023-0694
·
Published
2023-06-09
·
Updated
2023-06-14
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Metform Elementor Contact Form Builder for WordPress versions up to, and including, 3.3.1
Description
The issue allows authenticated attackers with subscriber-level capabilities or above to obtain sensitive information about any standard form field of any form submission via the 'mf' shortcode.
Recommendations
For versions up to, and including, 3.3.1, update to a version higher than 3.3.1 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾