Medium · 4.3 CVE-2023-47871 EUVD-2023-51961GHSA-gf8c-4235-7g24

WordPress Contact Form to Any API plugin <= 1.1.6 - Broken Access Control vulnerability

Published Dec 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: IT Path Solutions Product: Contact Form to Any API

Description

Missing Authorization vulnerability in IT Path Solutions Contact Form to Any API allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form to Any API: from n/a through 1.1.6.

Affected products

Vendor	Product	Affected	Fixed
IT Path Solutions	Contact Form to Any API	≤ 1.1.6	—

References

https://patchstack.com/database/wordpress/plugin/contact-form-to-any-api/vulnerability/wordpress-contact-form-to-any-api-plugin-1-1-6-broken-access-control-vulnerability?_s_id=cve vdb-entry