Now officially on WordPress.org

CVE Database / CVE-2023-1843

CVE · Medium

CVE-2023-1843 — MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor [metform] < 3.3.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-1843 MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor [metform] < 3.3.1 Missing Authorization Medium 5.3 < 3.3.2 3.3.2 2023-05-04 —

CVE-2023-1843

The MetForm plugin for WordPress versions up to 3.3.0 contains a capability check vulnerability in its permalink_setup function that allows unauthenticated attackers to modify the site's permalink structure. The flaw stems from insufficient access controls on the permalink configuration functionality. An attacker could exploit this to alter how WordPress generates post URLs without requiring authentication. The vulnerability was patched in version 3.3.1.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings