CVE-2024-48037: WordPress Contact Form Widget plugin <= 1.4.2 - CSRF vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Contact Form Widget new-contact-form-widget allows Cross Site Request Forgery.This issue affects Contact Form Widget: from n/a through <= 1.4.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48037?
CVE-2024-48037 is classified as a Cross-Site Request Forgery (CSRF) vulnerability, which can significantly impact the security of the affected application.
How do I fix CVE-2024-48037?
To fix CVE-2024-48037, update the WP Life Contact Form Widget to the latest version beyond 1.4.2 to mitigate the CSRF risk.
What versions are affected by CVE-2024-48037?
CVE-2024-48037 affects the WP Life Contact Form Widget versions up to and including 1.4.2.
What kind of attack can CVE-2024-48037 lead to?
CVE-2024-48037 can lead to unauthorized actions being performed on behalf of an authenticated user, potentially compromising user data.
Is CVE-2024-48037 specific to certain environments?
CVE-2024-48037 specifically affects the WP Life Contact Form Widget used within WordPress installations.