CVE-2023-28494

MEDIO 4.3CVE-2023-28494 · Published 04/06/2024 · updated 17/06/2026

En resumen

CVE-2023-28494 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a contact form email (codepeople).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.31%, mayor que el 24.3% de las vulnerabilidades.
Solución: actualizar a 1.3.32 o posterior.

Package	Affected versions	Patched versions
contact form email codepeople	`< 1.3.32`	`1.3.32`

Description

Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31.

References

patchstack.com/database/vulnerability/contact-form-to-email/wordpress-contact-form-email-plugin-1-3-31-missing-authorization-leading-to-feedback-submission-vulnerability · Third Party Advisory

Más vulnerabilidades de contact form email

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

contact form email

codepeople

< 1.3.32

1.3.32

Más vulnerabilidades de contact form email

Ver todo →