Information Disclosure in Metform Elementor Contact Form Builder for WordPress

CVE-2023-0688

What is CVE-2023-0688?

The Metform Elementor Contact Form Builder for WordPress presents a vulnerability that enables authenticated attackers with subscriber-level access or higher to exploit the 'mf_thankyou' shortcode. This flaw allows the unauthorized retrieval of sensitive data related to form submissions, including payment statuses and transaction IDs. Users of versions up to and including 3.3.1 are particularly at risk, highlighting the importance of updating to secure versions to protect sensitive information from potential exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References