Skip to content
Sign in
4.3 Medium

CVE-2022-23180 The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce…

Description

The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks, which could allow any authenticated users, such as subscriber to update and change various settings

Affected products and versions

Product Affected versions Fixed in
Contact Form & Lead Form Elementor Builder 1.7 earliest → < 1.7.4 1.7.4

Other CVEs of Contact Form & Lead Form Elementor Builder

The 3 CVEs of Contact Form & Lead Form Elementor Builder →
CVE-2022-23179 The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields… 4.8 Medium CVE-2021-24967 The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead… Not rated
Track this CVE