Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-0694
HistoryJun 09, 2023 - 6:15 a.m.

Design/Logic Flaw

2023-06-0906:15:00
PRIOn knowledge base
www.prio-n.com
4
metform
elementor
wordpress
information disclosure
vulnerable
authentication
sensitive information

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Information Disclosure via the ‘mf’ shortcode in versions up to, and including, 3.3.1. This allows authenticated attackers, with subscriber-level capabilities or above to obtain sensitive information about any standard form field of any form submission.

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

Related for PRION:CVE-2023-0694