Логотип exploitDog
bind:CVE-2022-0140
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-0140

Количество 2

Количество 2

nvd логотип

CVE-2022-0140

почти 4 года назад

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-rmwm-c9cm-59pw

почти 4 года назад

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-0140

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.

CVSS3: 5.3
10%
Низкий
почти 4 года назад
github логотип
GHSA-rmwm-c9cm-59pw

The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.

CVSS3: 5.3
10%
Низкий
почти 4 года назад

Уязвимостей на страницу