CVE-2022-23180

Contact Form & Lead Form Elementor Builder Plugin < 1.7.4 - Multiple Subscriber+ Settings Update

Medium · published January 16, 2024

CVSS v3.1
4.3
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks, which could allow any authenticated users, such as subscriber to update and change various settings

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Published
2024-01-16T15:52Z
EPSS history
Timeline
  • 16 JAN 15:52Z
    Contact Form & Lead Form Elementor Builder Plugin < 1.7.4 - Multiple Subscriber+ Settings Update
    cvelistv5