| Package | Affected versions | Patched versions |
|---|---|---|
| visual form builder | < 3.0.6 | 3.0.6 |
The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free