Description
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthenticated attackers to view submitter information through the REST API.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | MetForm | < 4.3.1 | 4.3.1 |
References
- https://wpscan.com/vulnerability/d73e4c95-471b-4f22-97a0-b6a59f187bcd/ exploit vdb-entry technical-description