Test ID:	1.3.6.1.4.1.25623.1.0.127471
Category:	Web application abuses
Title:	WordPress Metform Elementor Contact Form Builder Plugin < 3.3.2 Multiple Information Disclosure Vulnerabilities
Summary:	The WordPress plugin 'Metform Elementor Contact Form Builder'; is prone to multiple information disclosure vulnerabilities.
Description:	Summary: The WordPress plugin 'Metform Elementor Contact Form Builder' is prone to multiple information disclosure vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2023-0688: There is an authenticated information disclosure via the 'mf_thankyou' shortcode. - CVE-2023-0691: There is an authenticated information disclosure via the 'mf_last_name' shortcode. - CVE-2023-0692: There is an authenticated information disclosure via the 'mf_payment_status' shortcode. - CVE-2023-0693: There is an authenticated information disclosure via 'mf_transaction_id' shortcode. - CVE-2023-0694: There is an authenticated information disclosure via 'mf' shortcode. Affected Software/OS: WordPress Metform Elementor Contact Form Builder plugin prior to version 3.3.2. Solution: Update to version 3.3.2 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-0688 https://plugins.trac.wordpress.org/browser/metform/trunk/base/shortcode.php?rev=2845078 https://plugins.trac.wordpress.org/changeset/2910040/ https://www.wordfence.com/threat-intel/vulnerabilities/id/81fc41a4-9206-404c-bd5b-821c77ff3593?source=cve Common Vulnerability Exposure (CVE) ID: CVE-2023-0691 https://www.wordfence.com/threat-intel/vulnerabilities/id/8fc4b815-dc05-4270-bf7a-3b01622739d7?source=cve Common Vulnerability Exposure (CVE) ID: CVE-2023-0692 https://www.wordfence.com/threat-intel/vulnerabilities/id/ddd85ff2-6607-4ac8-b91c-88f6f2fa6c56?source=cve Common Vulnerability Exposure (CVE) ID: CVE-2023-0693 https://www.wordfence.com/threat-intel/vulnerabilities/id/1f33a8db-7cd0-4a53-b2c1-cd5b7cd16214?source=cve Common Vulnerability Exposure (CVE) ID: CVE-2023-0694 https://www.wordfence.com/threat-intel/vulnerabilities/id/1a8b194c-371f-4adc-98fa-8f4e47a38ee7?source=cve
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.