CVE-2023-27460: WordPress CP Contact Form with PayPal plugin <= 1.3.34 - Missing Authorization Leading To Feedback Submission vulnerability
Published Jun 3, 2024
·Updated
Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.This issue affects CP Contact Form with Paypal: from n/a through 1.3.34.
Affected Software
3 affected components
CodePeople Cp Contact Form With Paypal Wordpress<1.3.35
CodePeople CP Contact Form with PayPal<=1.3.34
WordPress CP Contact Form with PayPal<=1.3.34
Remediation
Information
Update to 1.3.35 or a higher version.
Event History
Jun 3, 2024
CVE Published
via MITRE·10:01 PM
Data Sourced
via MITRE·10:01 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-27460?
CVE-2023-27460 is considered a medium-severity vulnerability due to the missing authorization issue that can lead to functionality misuse.
2
How do I fix CVE-2023-27460?
To fix CVE-2023-27460, upgrade the CP Contact Form with PayPal plugin to version 1.3.35 or later.
3
What products are affected by CVE-2023-27460?
CVE-2023-27460 affects the CodePeople CP Contact Form with PayPal plugin versions up to and including 1.3.34.
4
What type of vulnerability is CVE-2023-27460?
CVE-2023-27460 is a missing authorization vulnerability that allows for functionality misuse.
5
Can CVE-2023-27460 be exploited remotely?
Yes, CVE-2023-27460 can be remotely exploited, allowing unauthorized users to submit feedback through the contact form.