Skip to content
OpenAdvisories
High · 7.3 CVE-2022-34867 EUVD-2022-6659GHSA-29qv-hhg4-6x96

WordPress WP Libre Form 2 plugin <= 2.0.8 - Unauthenticated Sensitive Information Disclosure vulnerability

Published Sep 6, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauthenticated Sensitive Information Disclosure vulnerability in WP Libre Form 2 plugin <= 2.0.8 at WordPress allows attackers to list and delete submissions. Affects only versions from 2.0.0 to 2.0.8.

Affected products

VendorProductAffectedFixed
Libreform WP Libre Form 2 (WordPress plugin) <= 2.0.8 – ≤ 2.0.8 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist libreform/libreform >= 2.0.0, < 2.0.9 2.0.9 GHSA-29qv-hhg4-6x96

References