Lucene search

WpvulndbWPVDB-ID:BAD3C574-CD2B-4BAD-A4F9-595F6B2EA53F

HistoryApr 11, 2024 - 12:00 a.m.

Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Missing Authorization

2024-04-1100:00:00

wpscan.com

contact form

lead generation

responsive

plugin

missing authorization

unauthorized access

wordpress

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

20.4%

JSON

Description The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to unauthorized access to functionality due to a missing capability check on several functions in all versions up to, and including, 1.8.9. This makes it possible for unauthenticated attackers to invoke those functions.

References

www.wordfence.com/threat-intel/vulnerabilities/id/d087957c-0dd5-46a9-a6bc-85f2f79f43bd

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

20.4%

JSON

Related for WPVDB-ID:BAD3C574-CD2B-4BAD-A4F9-595F6B2EA53F