medium6.5
CVE-2021-3133
The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages.
Impact
The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sean-Barton | Elementor Contact Form Db | before 1.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://advisory.checkmarx.net/advisory/CX-2020-4293
- https://plugins.trac.wordpress.org/changeset/2454670/
- https://wordpress.org/plugins/sb-elementor-contact-form-db/#developers
- https://advisory.checkmarx.net/advisory/CX-2020-4293
- https://plugins.trac.wordpress.org/changeset/2454670/
- https://wordpress.org/plugins/sb-elementor-contact-form-db/#developers