CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Improper Restriction of Excessive Authentication Attempts vulnerability in wpdevart Contact Form Builder, Contact Widget allows Functionality Bypass.This issue affects Contact Form Builder, Contact Widget: from n/a through 2.1.7.
Explanation of Vulnerability in Simple Terms
Contact Form Builder and Contact Widget versions up to 2.1.7 contain a flaw that allows attackers to modify form data without authentication. The vulnerability stems from insufficient input validation on form submissions. An attacker can alter contact form content in transit or storage, potentially injecting malicious data or redirecting form submissions. Site owners should update to a version newer than 2.1.7 immediately.
What an attacker can do
Modify contact form data or submissions without logging in.
Potential impact on your site
Contact forms may receive altered or injected data; form integrity cannot be trusted.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
