Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 8:23 a.m.•14 views

CVE-2024-1415

The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.9. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attacker...

4.3CVSS5.2AI score0.00267EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/02 5:15 p.m.•35 views

CVE-2024-1415

The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.9. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attacker...

4.3CVSS4.2AI score0.00267EPSS
SaveExploits0References6
CVE
CVE
•added 2024/05/02 4:52 p.m.•99 views

CVE-2024-1415

CVE-2024-1415 affects the WordPress plugin Responsive Contact Form Builder & Lead Generation (lead-form-builder) up to version 1.8.9. Root cause: missing/incorrect nonce validation enables CSRF, allowing unauthenticated users to trigger actions (form deletion, lead signup, file upload) by trickin...

4.3CVSS6.3AI score0.00267EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/05/02 4:52 p.m.•34 views

CVE-2024-1415 Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Cross-Site Request Forgery

The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.9. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attacker...

4.3CVSS4.5AI score0.00267EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/02 12:00 a.m.•1 views

CVE-2024-1415: Cross-Site Request Forgery (CSRF)

The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.9. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attacker...

4.3CVSS5.5AI score0.00267EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2024/04/11 12:00 a.m.•22 views

Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Cross-Site Request Forgery

Description The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.9. This is due to missing or incorrect nonce validation on several functions. This makes it possible for...

4.3CVSS6.6AI score0.00267EPSS
SaveExploits0References1
Rows per page
Query Builder