Lucene search
+L

3 matches found

attackerkb
attackerkb
•added 2022/04/12 12:15 p.m.•17 views

CVE-2022-0140

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint...

5.3CVSS5.9AI score0.0384EPSS
SaveExploits2References4
osv_cve
osv_cve
•added 2022/04/12 12:15 p.m.•24 views

CVE-2022-0140

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint...

5.3CVSS5.8AI score0.0384EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2022/04/12 11:15 a.m.•45 views

CVE-2022-0140 Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint...

5.6AI score0.0384EPSS
SaveExploits2References2
Rows per page
Query Builder