Forminator – Contact Form, Payment Form & Custom Form Builder, a21fe486c0d12bb84dae67419237715aa2ed4396
- CVE, Research URL
- Home page URL
-
Security reports for Forminator – Contact Form, Payment Form & Custom Form Builder
- Published on
- Apr 12, 2023
- Research Description
- Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.23.3 Forminator <= 1.22.1 - Missing Authorization on 'load_recaptcha_preview' AJAX function The Forminator plugin for WordPress is vulnerable to missing authorization due to a missing capability check on the 'load_recaptcha_preview' AJAX function in versions up to, and including, 1.22.1. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to preview recaptcha functionality.
- Affected versions
-
max 1.23.3.
- Status
-
vulnerable