Lucene search
+L

3 matches found

OSV
OSV
added 2022/04/12 12:15 p.m.8 views

CVE-2022-0140

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint...

5.3CVSS5.8AI score0.0384EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/04/12 12:15 p.m.7 views

CVE-2022-0140

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint...

5.3CVSS5.9AI score0.0384EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2022/04/12 11:15 a.m.34 views

CVE-2022-0140 Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint...

5.6AI score0.0384EPSS
SaveExploits1References2
Rows per page
Query Builder