CVE Database /
CVE-2021-4417
CVE · Medium
CVE-2021-4417 — Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.13.5
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-4417
|
Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.13.5 |
Cross-Site Request Forgery (CSRF) |
Medium
4.3
|
< 1.13.5
|
1.13.5 |
2021-03-01 |
—
|
CVE-2021-4417
The Forminator plugin through version 1.13.4 contains a cross-site request forgery vulnerability in the listen_for_saving_export_schedule() function due to inadequate nonce verification. An unauthenticated attacker could exploit this flaw by crafting a malicious request that, if clicked by an authenticated administrator, would allow the attacker to export form submissions without proper authorization. The vulnerability was fixed in version 1.13.5.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings