WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability

CVE-2023-35051

What is CVE-2023-35051?

A missing authorization vulnerability exists in the Contact Forms plugin by Cimatti Consulting due to incorrectly configured access control settings. This flaw allows unauthorized users to potentially exploit the system and gain access to restricted areas. Users of Contact Forms by Cimatti should be aware of this issue, which affects versions from an unspecified number up to 1.5.7, and consider applying necessary updates or security measures to mitigate potential risks.

References