Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2024/05/23 4:30 a.m.28 views

CVE-2023-6325 RomethemeForm For Elementor <= 1.1.5 - Missing Authorization via export_entries, rtformnewform, and rtformupdate

The RomethemeForm For Elementor plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the exportentries, rtformnewform, and rtformupdate functions in all versions up to, and including, 1.1.5. This makes it possible for...

5.3CVSS5.7AI score0.00378EPSS
SaveExploits0References3
CVE
CVE
added 2024/05/23 4:30 a.m.68 views

CVE-2023-6325

CVE-2023-6325 concerns the RomethemeForm For Elementor WordPress plugin. The vulnerability arises from a missing capability check in export_entries, rtformnewform, and rtformupdate, affecting all versions up to 1.1.5. Consequences include unauthenticated export of form submissions, creation of ne...

5.3CVSS5.7AI score0.00378EPSS
SaveExploits0References3
Rows per page
Query Builder