WordPress Plugin Vulnerabilities

Contact Form Email < 1.3.42 - Captcha Bypass

Description

The Contact Form Email plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 1.3.41. This makes it possible for unauthenticated attackers to bypass the Captcha Verification.

Affects Plugins

Plugin icon
contact-form-to-email
Fixed in 1.3.42

References

CVE
CVE-2023-48318
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/b637ebfd-c273-428b-985c-6f5b6a03f263

Miscellaneous

Original Researcher
qilin_99
Verified
No
WPVDB ID
d4db71cc-8434-4c14-91d5-ef582418480a

Timeline

Publicly Published
2023-11-23 (about 2 years ago)
Added
2023-11-29 (about 2 years ago)
Last Updated
2024-01-22 (about 2 years ago)

Other

Published
Title
Published
2016-05-26
Title
Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)
Published
2014-08-01
Title
Echelon 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2023-11-28
Title
WP Forms Puzzle Captcha <= 4.1 - Captcha Bypass
Published
2024-10-15
Title
Job Board Manager for WordPress <= 1.0 - Unauthenticated Privilege Escalation
Published
2023-12-15
Title
Slick Social Share Buttons <= 2.4.11 - Authenticated (Subscriber+) Arbitrary Option Update