Lucene search
PRIOn knowledge basePRION:CVE-2023-0691HistoryJun 09, 2023 - 6:15 a.m.
Information disclosure
2023-06-0906:15:00
PRIOn knowledge base
www.prio-n.com
3
metform
elementor
wordpress
information disclosure
vulnerability
shortcode
authenticated attackers
sensitive information
The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the ‘mf_last_name’ shortcode in versions up to, and including, 3.3.1. This allows authenticated attackers, with subscriber-level capabilities or above to obtain sensitive information about arbitrary form submissions, specifically the submitter’s last name.
| CPE | Name | Operator | Version |
|---|---|---|---|
| metform_elementor_contact_form_builder | le | 3.3.1 |
Related
cve
cve
CVE-2023-0691
2023-06-09 06:15:50
cvelist
cvelist
CVE-2023-0691
2023-06-09 05:33:23
nvd
nvd
CVE-2023-0691
2023-06-09 06:15:50
wpvulndb
wpvulndb
openvas
openvas
wordfence
wordfence