T
he Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive data including user signatures.
References
Configurations
History
06 Mar 2025, 16:08
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
10web
10web form Maker |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:10web:form_maker:*:*:*:*:*:wordpress:*:* | |
| References | () https://plugins.trac.wordpress.org/changeset?old_path=/form-maker/tags/1.15.22&old=3057012&new_path=/form-maker/tags/1.15.23&new=3057012&sfp_email=&sfph_mail= - Patch | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/5652f9c3-3cc9-4541-8209-40117b4d25d9?source=cve - Third Party Advisory |
21 Nov 2024, 09:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://plugins.trac.wordpress.org/changeset?old_path=/form-maker/tags/1.15.22&old=3057012&new_path=/form-maker/tags/1.15.23&new=3057012&sfp_email=&sfph_mail= - | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/5652f9c3-3cc9-4541-8209-40117b4d25d9?source=cve - |
Information
Published : 2024-04-09 19:15
Updated : 2025-03-06 16:08
NVD link : CVE-2024-2112
Mitre link : CVE-2024-2112
CVE.ORG link : CVE-2024-2112
JSON object : View
Products Affected
CWE