Forminator – Contact Form, Payment Form & Custom Form Builder, 80e70c77f8d37e072f057d1cda6ecc52f3703251
- CVE, Research URL
- Home page URL
-
Security reports for Forminator – Contact Form, Payment Form & Custom Form Builder
- Published on
- Apr 12, 2023
- Research Description
- Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.23.3 Forminator <= 1.22.1 - Missing Authorization on 'load_hcaptcha_preview' AJAX function The Forminator plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'load_hcaptcha_preview' AJAX function in versions up to, and including, 1.22.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to preview hcaptcha functionality.
- Affected versions
-
max 1.23.3.
- Status
-
vulnerable