CVE-2023-1843

概要

参考情報

• plugins.trac.wordpress.org/browser/metform/trunk/plugin.php · Patch
• plugins.trac.wordpress.org/changeset/2907471 · Patch
• wordfence.com/threat-intel/vulnerabilities/id/5db00eb6-3e05-42fa-bb84-2df4bcae3955 · Third Party Advisory

metform elementor contact form builder のその他の脆弱性

• CVE-2023-50903緊急 9.8Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This i…
• CVE-2023-0714緊急 9.8The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in …
• CVE-2024-4266高 7.5The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Ex…
• CVE-2024-33570高 8.8Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3.
• CVE-2024-2791中 5.4The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all…