Aller au contenu
5.3 Moyenne

CVE-2024-2043 The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized…

Description

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when downloading form submissions in all versions up to, and including, 2.9.9.7. This makes it possible for unauthenticated attackers to view form submissions.

Produits et versions touchés

Produit Versions touchées Corrigé en
EleForms – All In One Form Integration including DB for Elementor 2.9 premières → 2.9.9.7 Pas de correctif indiqué
Les 4 CVE de EleForms – All In One Form Integration including DB for Elementor →
Suivre cette CVE