Medium · 5.4 CVE-2022-43459 EUVD-2022-46460GHSA-94wq-wgcm-m3pq

WordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 28, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Forms by CaptainForm – Form Builder for WordPress plugin <= 2.5.3 versions.

Vendor	Product	Affected	Fixed
Captainform	Forms by CaptainForm – Form Builder for WordPress	≤ 2.5.3	—