WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability

CVE-2023-34387

What is CVE-2023-34387?

A missing authorization vulnerability exists within Constant Contact Forms that allows attackers to exploit incorrectly configured access control security levels. This flaw compromises data integrity by enabling unauthorized access to forms. Users running versions up to and including 2.0.3 are particularly at risk, as they may not have the appropriate protections in place to safeguard their sensitive information.

References