Lucene search
K

305 matches found

CNNVD
CNNVD
added 2023/04/12 12:0 a.m.2 views

WordPress plugin Metform Elementor Contact Form Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS6.4AI score0.00322EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.3 views

WordPress plugin Metform Elementor Contact Form Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.4CVSS6.8AI score0.00104EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.2 views

WordPress plugin Metform Elementor Contact Form Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS6.4AI score0.00249EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.2 views

WordPress plugin Metform Elementor Contact Form Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

6.5CVSS6.4AI score0.00322EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.2 views

WordPress plugin Metform Elementor Contact Form Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.4CVSS6.8AI score0.00153EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.1 views

WordPress plugin Metform Elementor Contact Form Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.4CVSS6.8AI score0.00171EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.3 views

WordPress plugin Metform Elementor Contact Form Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS5.8AI score0.13921EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/04/12 12:0 a.m.2 views

WordPress plugin Metform Elementor Contact Form Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

5.4CVSS6.8AI score0.00171EPSS
Exploits0References4
0day.today
0day.today
added 2023/04/03 12:0 a.m.260 views

Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting Vulnerab

Exploit Title: Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting XSS Google Dork: inurl:metform-form intext:textarea|message Exploit Author: Mohammed Chemouri https://de.linkedin.com/in/chemouri Vendor Homepage: https://wpmet.com/plugin/metform/ Software...

7.2CVSS6.4AI score0.47843EPSS
Exploits5
Exploit DB
Exploit DB
added 2023/04/03 12:0 a.m.219 views

Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS)

Exploit Title: Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting XSS Google Dork: inurl:metform-form intext:textarea|message Date: 14/01/2023 Exploit Author: Mohammed Chemouri https://de.linkedin.com/in/chemouri Vendor Homepage:...

7.2CVSS6.4AI score0.47843EPSS
Exploits5
Packet Storm
Packet Storm
added 2023/04/03 12:0 a.m.277 views

WordPress Metform Elementor Contact Form Builder 3.1.2 Cross Site Scripting

Exploit Title: Metform Elementor Contact Form Builder v3.1.2 - Unauthenticated Stored Cross-Site Scripting XSS Google Dork: inurl:metform-form intext:textarea|message Date: 14/01/2023 Exploit Author: Mohammed Chemouri https://de.linkedin.com/in/chemouri Vendor Homepage:...

7.2CVSS6.4AI score0.47843EPSS
Exploits5
Patchstack
Patchstack
added 2023/03/03 12:0 a.m.12 views

WordPress Metform Elementor Contact Form Builder Plugin <= 3.2.1 is vulnerable to Bypass Vulnerability

Software Metform Elementor Contact Form Builder Type Plugin Vulnerable versions = 3.2.1 Fixed in 3.2.2 OWASP Top 10 A5: Broken Access Control Classification Bypass Vulnerability CVE CVE-2023-0085 Patch priority Low CVSS severity Low 5.3 Developer Wpmet PSID 9ebffbb7ebd5 Credits Mohammed El Amin...

5.3CVSS6.9AI score0.00785EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/03/02 7:15 p.m.1 views

CVE-2023-0084

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6AI score
Exploits0References3
NVD
NVD
added 2023/03/02 7:15 p.m.20 views

CVE-2023-0084

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6.2AI score0.47843EPSS
Exploits5References5
Prion
Prion
added 2023/03/02 7:15 p.m.19 views

Cross site scripting

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

5.8CVSS5.8AI score0.47843EPSS
Exploits5References3Affected Software1
Cvelist
Cvelist
added 2023/03/02 6:35 p.m.19 views

CVE-2023-0084 Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6.4AI score0.47843EPSS
Exploits5References4
CVE
CVE
added 2023/03/02 6:35 p.m.109 views

CVE-2023-0084

The CVE-2023-0084 entry affects the WordPress Metform Elementor Contact Form Builder plugin, versions up to and including 3.1.2. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw caused by insufficient input sanitization and output escaping in text areas on forms, enabling unauthentic...

7.2CVSS5.7AI score0.47843EPSS
Exploits5References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/02 6:35 p.m.11 views

CVE-2023-0084

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6.2AI score0.47843EPSS
Exploits5References3
OSV
OSV
added 2023/03/02 5:15 p.m.2 views

CVE-2023-0085

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1. This is due to insufficient server side checking on the captcha value submitted during a form submission. This makes it possible for unauthenticated attackers...

5.3CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2023/03/02 5:15 p.m.10 views

CVE-2023-0085

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1. This is due to insufficient server side checking on the captcha value submitted during a form submission. This makes it possible for unauthenticated attackers...

5.3CVSS5.2AI score0.00785EPSS
Exploits0References4
Rows per page
Query Builder