WordPress Plugin Vulnerabilities

Form Maker < 1.15.21 - Captcha Bypass

Description

The Form Maker plugin for WordPress is vulnerable to Captcha Bypass in versions up to, and including, 1.15.20 due to insufficient input verification. This makes it possible for unauthenticated attackers to automate form submissions.

Affects Plugins

Plugin icon
form-maker
Fixed in 1.15.21

References

CVE
CVE-2023-48290
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/46525a06-f3a4-4c78-ba32-4b937e1dbac6

Miscellaneous

Original Researcher
qilin_99
Verified
No
WPVDB ID
1e211961-66fc-47a2-87bb-51f27274614f

Timeline

Publicly Published
2023-10-11 (about 2 years ago)
Added
2023-11-29 (about 2 years ago)
Last Updated
2024-01-10 (about 2 years ago)

Other

Published
Title
Published
2024-03-25
Title
Essential Addons for Elementor < 5.9.12 - Contributor+ Stored XSS
Published
2014-08-01
Title
WordPress XML-RPC Interface Access Restriction Bypass
Published
2014-08-01
Title
ShareYourCart 1.6.1 - SDK Multiple Unspecified Path Disclosure
Published
2023-06-02
Title
Contact Form and Calls To Action by vcita <= 2.7.1 - Settings Update Via CSRF
Published
2014-08-01
Title
wp-FileManager < 1.4.0 - File Download