CVE-2022-0141CWE-352

Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRF

published April 12, 2022

CVSS
—
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or editor delete and restore arbitrary form entries via CSRF attacks

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00471 · 39.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-04-12T11:15Z
EPSS history
Timeline
  • 12 APR 11:15Z
    Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRF
    cvelistv5