WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Broken Access Control

Software WCP Contact Form Type Plugin Vulnerable versions = 3.1.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32520 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 37d423cfc955 Credits thiennv Required privilege...

WordPress WCP Contact Form Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

Software WCP Contact Form Type Plugin Vulnerable versions = 3.1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-22703 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID b15b6e2cd5a5 Credits Le Ngoc Anh Requir...