CVE-2021-3133

The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-01-12

Last modified

2024-08-03

Weaknesses

CWE-352

Affected products

• Elementor Contact Form Db (Sean-barton)

References

• https://advisory.checkmarx.net/advisory/CX-2020-4293
• https://plugins.trac.wordpress.org/changeset/2454670/
• https://wordpress.org/plugins/sb-elementor-contact-form-db/#developers