CVE-2023-30616

MEDIUM 6.5CVE-2023-30616 · Published 20/04/2023 · updated 17/06/2026

In short

CVE-2023-30616 is a MEDIUM (CVSS 6.5) vulnerability affecting form block (epiph).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 22.3% of all vulnerabilities.
Fix: update to 1.0.2 or later.

Package	Affected versions	Patched versions
form block epiph	`< 1.0.2`	`1.0.2`

Description

Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing nonce check. There is potential for a Cross Site Request Forgery for all form blocks, since it allows to send requests to the forms from any website without a user noticing. Users are advised to upgrade to version 1.0.2. There are no known workarounds for this vulnerability.

References

epiphyt/form-block commit cf0012f · Patch
epiphyt/form-block security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free