Lucene search

K
wpvulndbWpvulndbWPVDB-ID:514B1581-2880-44FE-91E1-5874EAFFC901
HistoryJun 08, 2023 - 12:00 a.m.

Metform Elementor Contact Form Builder < 3.3.2 - Multiple Subscriber+ Sensitive Information Disclosure Issues

2023-06-0800:00:00
wpscan.com
10
metform
elementor
contact form builder
plugin
sensitive information disclosure
payment statuses
transaction ids
submitters name
form submissions

EPSS

0.001

Percentile

48.8%

The plugin does not prevent less privileged users, like subscribers, from accessing various sensitive information via the plugin’s shortcodes. This includes payment statuses, transaction IDs, submitter’s name information, and virtually all fields of any form submissions.

EPSS

0.001

Percentile

48.8%

Related for WPVDB-ID:514B1581-2880-44FE-91E1-5874EAFFC901