Описание
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive data including user signatures.
Ссылки
- Patch
- Third Party Advisory
- Patch
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.15.23 (исключая)
cpe:2.3:a:10web:form_maker:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 76%
0.00966
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 5.9
github
почти 2 года назад
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive data including user signatures.
EPSS
Процентиль: 76%
0.00966
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
NVD-CWE-noinfo