4.3
Moyenne
CVE-2024-6628 The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site…
Description
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.9.9. This is due to missing or incorrect nonce validation when deleting form submissions. This makes it possible for unauthenticated attackers to delete form submissions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EleForms – All In One Form Integration including DB for Elementor 2.9 | premières → 2.9.9.9 | Pas de correctif indiqué |
Autres CVE de EleForms – All In One Form Integration including DB for Elementor
Les 4 CVE de EleForms – All In One Form Integration including DB for Elementor →
CVE-2024-6626
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized…
5.3
Moyenne
CVE-2024-2082
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Stored…
7.2
Élevée
CVE-2024-2043
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized…
5.3
Moyenne