CVE-2022-34867highCWE-200

CVE-2022-34867: high-severity vulnerability in Libreform WP Libre Form 2 (WordPress plugin)

WordPress WP Libre Form 2 plugin <= 2.0.8 - Unauthenticated Sensitive Information Disclosure vulnerability

Published · Updated

Follow this CVE+ Monitor WP Libre Form+ Monitor libreform/libreform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 0.8%
Unauthenticated Sensitive Information Disclosure vulnerability in WP Libre Form 2 plugin <= 2.0.8 at WordPress allows attackers to list and delete submissions. Affects only versions from 2.0.0 to 2.0.8.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
Libreform · WP Libre Form 2 (WordPress plugin)