Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-0484

The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack

Published

2023-03-27T16:15:08.333

Last Modified

2025-02-19T20:15:33.520

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

-

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application hasthemes contact_form_7_widget_for_elementor_page_builder_\&_gutenberg_blocks < 1.1.6 Yes
References