Lucene search
PRIOn knowledge basePRION:CVE-2023-0689HistoryAug 31, 2023 - 6:15 a.m.
Information disclosure
2023-08-3106:15:00
PRIOn knowledge base
www.prio-n.com
5
metform
elementor
contact form
wordpress
information disclosure
vulnerable
'mf_first_name'shortcode
version 3.3.1
authenticated attackers
subscriber-level capabilities
sensitive information
arbitrary form submissions
The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the ‘mf_first_name’ shortcode in versions up to, and including, 3.3.1. This allows authenticated attackers, with subscriber-level capabilities or above to obtain sensitive information about arbitrary form submissions, including the submitter’s first name.
| CPE | Name | Operator | Version |
|---|---|---|---|
| metform_elementor_contact_form_builder | lt | 3.3.2 |
Related
cvelist
cvelist
CVE-2023-0689
2023-08-31 05:33:05
cve
cve
CVE-2023-0689
2023-08-31 06:15:08
openvas
openvas
wpvulndb
wpvulndb
nvd
nvd
CVE-2023-0689
2023-08-31 06:15:08
wordfence
wordfence