Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure
18Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 3.8%
probabilidad de explotación
3.8%top 11% de las CVE
explotación observada
noninguna fuente lo reporta
The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.
Productos afectados
Unknown · Visual Form Builder