Description

WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress version 1.5.3 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.5.5 or latest

References

https://plugins.svn.wordpress.org/weforms/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.1.22)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7834)

WordPress Plugin Floating Chat Widget:Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button-Chaty SQL Injection (3.0.2)

WordPress Plugin WP Sitemap Page Cross-Site Scripting (1.6.6)

Drupal Improper Access Control Vulnerability (CVE-2020-13677)

Severity

High

Tags

Missing Update