Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-19793
HistoryMar 09, 2022 - 12:00 a.m.

WordPress Smart Forms Plugin Information Disclosure Vulnerability

2022-03-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
wordpress
smart forms plugin
information disclosure
vulnerability
version 2.6.71
unauthorized access
form data
php
mysql

EPSS

0.001

Percentile

32.8%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers.WordPress Smart Forms Plugin version 2.6.71 before the information leakage vulnerability, the vulnerability stems from the plugin in its rednao_Smart_Forms_entries_list AJAX operation is not authorized, an attacker can exploit the vulnerability to download arbitrary form data.

EPSS

0.001

Percentile

32.8%