WordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerability
CVE-2023-41862

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Vs Contact Form
Vendor
CVE Published:
13 December 2024

What is CVE-2023-41862?

The vulnerability in the Guido VS Contact Form enables attackers to exploit weak authentication mechanisms, potentially leading to unauthorized access and authentication abuse. This issue impacts versions from n/a through 14.0, necessitating immediate attention and remediation strategies for users to safeguard their systems from potential threats.

Affected Version(s)

VS Contact Form <= 14.0

References

https://patchstack.com/database/wordpress/plugin/very-sim...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

qilin_99 (Patchstack Alliance)
.