CVE-2023-0085CWE-693

Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass

Medium · published March 2, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1. This is due to insufficient server side checking on the captcha value submitted during a form submission. This makes it possible for unauthenticated attackers to bypass Captcha restrictions and for attackers to utilize bots to submit forms.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00686 · 52.1th percentile
Weakness
CWE-693 · Protection Mechanism Failure
Published
2023-03-02T16:01Z
EPSS history
Timeline
  • 02 MAR 16:01Z
    Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
    cvelistv5