Description (CNA)
The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Visual Form Builder | affected 0 before 3.0.6 |
CWE
No CWE identifiers supplied.
References
- https://wpscan.com/vulnerability/9fa2b3b6-2fe3-40f0-8f71-371dd58fe336
- https://www.fortiguard.com/zeroday/FG-VD-21-082
ADP enrichment
No English description supplied.