Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure
published April 12, 2022
CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is
The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03840 · 90.1th percentile
Published
2022-04-12T11:15Z
EPSS history
Timeline
12 APR 11:15Z
Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure