CVE-2023-33212: WordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF) vulnerability in Crocoblock JetFormBuilder — Dynamic Blocks Form Builder plugin <= 3.0.6 versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress JetFormBuilder Plugin (Crocoblock JetFormBuilder / JetFormBuilder Dynamic Blocks Form Builder)to a version that resolves this vulnerability.Fixed in 3.0.7
Event History
Frequently Asked Questions
What is the severity of CVE-2023-33212?
CVE-2023-33212 is classified as a medium severity Cross-Site Request Forgery (CSRF) vulnerability.
How do I fix CVE-2023-33212?
To fix CVE-2023-33212, upgrade the Crocoblock JetFormBuilder plugin to version 3.0.7 or later.
What versions are affected by CVE-2023-33212?
CVE-2023-33212 affects Crocoblock JetFormBuilder plugin versions 3.0.6 and earlier.
What is Cross-Site Request Forgery (CSRF) as it relates to CVE-2023-33212?
Cross-Site Request Forgery (CSRF) is an attack that tricks the victim into submitting unauthorized commands when they are authenticated.
Is my website vulnerable if I am using Crocoblock JetFormBuilder plugin version 3.0.6?
Yes, if you are using Crocoblock JetFormBuilder plugin version 3.0.6, your website is vulnerable to CVE-2023-33212.