CVE-2024-4266

CVE-2024-4266 concerns the MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress. The vulnerability is an unauthenticated sensitive information exposure via handle_file in MetForm versions

CVE-2024-4266: Exposure of Sensitive Information to an Unauthorized Actor

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.8.8 via the 'handlefile' function. This can allow unauthenticated attackers to extract sensitive data, such as...