CVE-2023-0085
First published: Thu Mar 02 2023(Updated: )
The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to reCaptcha Bypass in versions up to, and including, 3.2.1. This is due to insufficient server side checking on the captcha value submitted during a form submission. This makes it possible for unauthenticated attackers to bypass Captcha restrictions and for attackers to utilize bots to submit forms.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wpmet Metform Elementor Contact Form Builder | <=3.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-0085.
What is the severity of CVE-2023-0085?
The severity of CVE-2023-0085 is medium with a severity value of 5.3.
What is the affected software?
The affected software is the Metform Elementor Contact Form Builder plugin for WordPress up to, and including, version 3.2.1.
What is the cause of CVE-2023-0085?
The cause of CVE-2023-0085 is insufficient server side checking on the captcha value submitted during a form submission.
How can unauthenticated attackers exploit CVE-2023-0085?
Unauthenticated attackers can exploit CVE-2023-0085 by bypassing the reCaptcha in the Metform Elementor Contact Form Builder plugin for WordPress.
- agent/softwarecombine
- agent/severity
- agent/author
- agent/remedy
- agent/references
- agent/weakness
- agent/event
- agent/type
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/wpmet
- canonical/wpmet metform elementor contact form builder
- version/wpmet metform elementor contact form builder/3.2.1