CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in SzMake Contact Form 7 Anti Spambot contact-form-7-anti-spambot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form 7 Anti Spambot: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
Contact Form 7 Anti Spambot versions 1.0.1 and earlier lack proper access controls, allowing unauthenticated attackers to trigger a denial-of-service condition over the network. The vulnerability requires no user interaction and can be exploited by sending specially crafted requests. Site administrators should update to a version newer than 1.0.1 as soon as a patch becomes available.
What an attacker can do
Make the site unavailable or unresponsive by sending network requests without authentication.
Potential impact on your site
Your site may become slow or unresponsive if targeted; legitimate users may experience service disruption.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
