Contact Form Builder <= 1.0.68 - CSRF to LFI

🗓️ 23 Apr 2019 00:00:00Reported by Ryan DewhurstType

WDContactFormBuilder <= 1.0.68 CSRF to LFI vulnerability in WordPress plugin

Reporter	Title	Published	Views	Family All 5
Prion	Directory traversal	26 Apr 201922:29	–	prion
CVE	CVE-2019-11557	26 Apr 201922:29	–	cve
OpenVAS	WordPress Contact Form Builder Plugin < 1.0.69 CSRF Vulnerability	29 Apr 201900:00	–	openvas
NVD	CVE-2019-11557	26 Apr 201922:29	–	nvd
Cvelist	CVE-2019-11557	26 Apr 201921:42	–	cvelist

Vulners

Node

contact_form_builder_project contact_form_builderRange<1.0.69wordpress

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2070430/contact-form-builder
plugins	www.plugins.trac.wordpress.org/changeset/2053978/contact-form-builder
packetstormsecurity	www.packetstormsecurity.com/files/152579/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Apr 2019 00:00Current

2.7Low risk

Vulners AI Score2.7

EPSS0.002