CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2517

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on the permalink_setup function. This makes it possible for unauthenticated attackers to change the permalink structure via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. While nonce verification is implemented, verification only takes place when a nonce is provided.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 20.1%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2023-2517

Wpmet » Metform Elementor Contact Form Builder » Version: N/A

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:-
Wpmet » Metform Elementor Contact Form Builder » Version: 1.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.1
Wpmet » Metform Elementor Contact Form Builder » Version: 1.1.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.1.2
Wpmet » Metform Elementor Contact Form Builder » Version: 1.1.3

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.1.3
Wpmet » Metform Elementor Contact Form Builder » Version: 1.1.4

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.1.4
Wpmet » Metform Elementor Contact Form Builder » Version: 1.1.5

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.1.5
Wpmet » Metform Elementor Contact Form Builder » Version: 1.1.8

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.1.8
Wpmet » Metform Elementor Contact Form Builder » Version: 1.1.9

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.1.9
Wpmet » Metform Elementor Contact Form Builder » Version: 1.2.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.2.0
Wpmet » Metform Elementor Contact Form Builder » Version: 1.2.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.2.1
Wpmet » Metform Elementor Contact Form Builder » Version: 1.2.11

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.2.11
Wpmet » Metform Elementor Contact Form Builder » Version: 1.2.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.2.2
Wpmet » Metform Elementor Contact Form Builder » Version: 1.2.3

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.2.3
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.0
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.1
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.10

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.10
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.12

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.12
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.13

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.13
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.14

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.14
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.15

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.15
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.16

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.16
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.17

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.17
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.2
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.3

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.3
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.4

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.4
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.5

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.5
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.6

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.6
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.7

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.7
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.8

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.8
Wpmet » Metform Elementor Contact Form Builder » Version: 1.3.9

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.3.9
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.0
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.1
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.10

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.10
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.2
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.3

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.3
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.4

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.4
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.5

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.5
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.6

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.6
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.7

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.7
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.8

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.8
Wpmet » Metform Elementor Contact Form Builder » Version: 1.4.9

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.4.9
Wpmet » Metform Elementor Contact Form Builder » Version: 1.5.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.5.0
Wpmet » Metform Elementor Contact Form Builder » Version: 1.5.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.5.1
Wpmet » Metform Elementor Contact Form Builder » Version: 1.5.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.5.2
Wpmet » Metform Elementor Contact Form Builder » Version: 1.5.3

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.5.3
Wpmet » Metform Elementor Contact Form Builder » Version: 1.5.4

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.5.4
Wpmet » Metform Elementor Contact Form Builder » Version: 1.5.5

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.5.5
Wpmet » Metform Elementor Contact Form Builder » Version: 1.5.6

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.5.6
Wpmet » Metform Elementor Contact Form Builder » Version: 1.6.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:1.6.0
Wpmet » Metform Elementor Contact Form Builder » Version: 2.0.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.0.0
Wpmet » Metform Elementor Contact Form Builder » Version: 2.0.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.0.1
Wpmet » Metform Elementor Contact Form Builder » Version: 2.1.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.1.0
Wpmet » Metform Elementor Contact Form Builder » Version: 2.1.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.1.1
Wpmet » Metform Elementor Contact Form Builder » Version: 2.1.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.1.2
Wpmet » Metform Elementor Contact Form Builder » Version: 2.1.3

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.1.3
Wpmet » Metform Elementor Contact Form Builder » Version: 2.1.4

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.1.4
Wpmet » Metform Elementor Contact Form Builder » Version: 2.1.5

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.1.5
Wpmet » Metform Elementor Contact Form Builder » Version: 2.1.6

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.1.6
Wpmet » Metform Elementor Contact Form Builder » Version: 2.2.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.2.0
Wpmet » Metform Elementor Contact Form Builder » Version: 2.2.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:2.2.1
Wpmet » Metform Elementor Contact Form Builder » Version: 3.0.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.0.0
Wpmet » Metform Elementor Contact Form Builder » Version: 3.0.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.0.1
Wpmet » Metform Elementor Contact Form Builder » Version: 3.1.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.1.0
Wpmet » Metform Elementor Contact Form Builder » Version: 3.1.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.1.1
Wpmet » Metform Elementor Contact Form Builder » Version: 3.1.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.1.2
Wpmet » Metform Elementor Contact Form Builder » Version: 3.2.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.2.0
Wpmet » Metform Elementor Contact Form Builder » Version: 3.2.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.2.1
Wpmet » Metform Elementor Contact Form Builder » Version: 3.2.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.2.2
Wpmet » Metform Elementor Contact Form Builder » Version: 3.2.3

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.2.3
Wpmet » Metform Elementor Contact Form Builder » Version: 3.2.4

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.2.4
Wpmet » Metform Elementor Contact Form Builder » Version: 3.3.0

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.3.0
Wpmet » Metform Elementor Contact Form Builder » Version: 3.3.1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.3.1
Wpmet » Metform Elementor Contact Form Builder » Version: 3.3.2

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:3.3.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2517

Products

Pricing

Contact Us