Description (CNA)
The FormCraft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check in formcraft-main.php in all versions up to, and including, 3.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export all plugin data which may contain sensitive information from form submissions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FormCraft / FormCraft | affected 0 through 3.9.11 |
CWE
CWE-862
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/f7b45b1d-7ed6-4382-b69c-45ea45e4d0db?source=cve
- https://codecanyon.net/item/formcraft-premium-wordpress-form-builder/5335056
- https://formcraft-wp.com/changelog/
ADP enrichment
No English description supplied.
No references supplied.