Vulnerabilities > CVE-2022-23180 - Missing Authorization vulnerability in Themehunk Contact Form & Lead Form Elementor Builder

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

themehunk

CWE-862

NVD

Published: 2024-01-16

Updated: 2024-01-24

Summary

The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks, which could allow any authenticated users, such as subscriber to update and change various settings

Vulnerable Configurations

Part	Description	Count
Application	Themehunk Themehunk Contact Form & Lead Form Elementor Builder 1.0.0 Themehunk Contact Form & Lead Form Elementor Builder 1.0.1 Themehunk Contact Form & Lead Form Elementor Builder 1.0.2 Themehunk Contact Form & Lead Form Elementor Builder 1.0.3 Themehunk Contact Form & Lead Form Elementor Builder 1.0.4 Themehunk Contact Form & Lead Form Elementor Builder 1.0.5 Themehunk Contact Form & Lead Form Elementor Builder 1.0.6 Themehunk Contact Form & Lead Form Elementor Builder 1.0.7 Themehunk Contact Form & Lead Form Elementor Builder 1.0.8 Themehunk Contact Form & Lead Form Elementor Builder 1.0.9 Themehunk Contact Form & Lead Form Elementor Builder 1.1.0 Themehunk Contact Form & Lead Form Elementor Builder 1.1.1 Themehunk Contact Form & Lead Form Elementor Builder 1.1.2 Themehunk Contact Form & Lead Form Elementor Builder 1.1.3 Themehunk Contact Form & Lead Form Elementor Builder 1.1.4 Themehunk Contact Form & Lead Form Elementor Builder 1.1.5 Themehunk Contact Form & Lead Form Elementor Builder 1.1.6 Themehunk Contact Form & Lead Form Elementor Builder 1.1.7 Themehunk Contact Form & Lead Form Elementor Builder 1.1.8 Themehunk Contact Form & Lead Form Elementor Builder 1.1.10 Themehunk Contact Form & Lead Form Elementor Builder 1.2.0 Themehunk Contact Form & Lead Form Elementor Builder 1.2.1 Themehunk Contact Form & Lead Form Elementor Builder 1.2.2 Themehunk Contact Form & Lead Form Elementor Builder 1.2.3 Themehunk Contact Form & Lead Form Elementor Builder 1.2.4 Themehunk Contact Form & Lead Form Elementor Builder 1.2.5 Themehunk Contact Form & Lead Form Elementor Builder 1.2.6 Themehunk Contact Form & Lead Form Elementor Builder 1.2.7 Themehunk Contact Form & Lead Form Elementor Builder 1.2.8 Themehunk Contact Form & Lead Form Elementor Builder 1.2.9 Themehunk Contact Form & Lead Form Elementor Builder 1.3.0 Themehunk Contact Form & Lead Form Elementor Builder 1.3.1 Themehunk Contact Form & Lead Form Elementor Builder 1.3.2 Themehunk Contact Form & Lead Form Elementor Builder 1.3.3 Themehunk Contact Form & Lead Form Elementor Builder 1.3.4 Themehunk Contact Form & Lead Form Elementor Builder 1.3.5 Themehunk Contact Form & Lead Form Elementor Builder 1.3.6 Themehunk Contact Form & Lead Form Elementor Builder 1.3.7 Themehunk Contact Form & Lead Form Elementor Builder 1.3.8 Themehunk Contact Form & Lead Form Elementor Builder 1.3.9 Themehunk Contact Form & Lead Form Elementor Builder 1.3.10 Themehunk Contact Form & Lead Form Elementor Builder 1.3.11 Themehunk Contact Form & Lead Form Elementor Builder 1.3.12 Themehunk Contact Form & Lead Form Elementor Builder 1.3.13 Themehunk Contact Form & Lead Form Elementor Builder 1.4.0 Themehunk Contact Form & Lead Form Elementor Builder 1.4.1 Themehunk Contact Form & Lead Form Elementor Builder 1.4.2 Themehunk Contact Form & Lead Form Elementor Builder 1.4.3 Themehunk Contact Form & Lead Form Elementor Builder 1.4.4 Themehunk Contact Form & Lead Form Elementor Builder 1.4.6 Themehunk Contact Form & Lead Form Elementor Builder 1.4.7 Themehunk Contact Form & Lead Form Elementor Builder 1.4.8 Themehunk Contact Form & Lead Form Elementor Builder 1.4.9 Themehunk Contact Form & Lead Form Elementor Builder 1.4.10 Themehunk Contact Form & Lead Form Elementor Builder 1.4.11 Themehunk Contact Form & Lead Form Elementor Builder 1.4.12 Themehunk Contact Form & Lead Form Elementor Builder 1.4.13 Themehunk Contact Form & Lead Form Elementor Builder 1.5.0 Themehunk Contact Form & Lead Form Elementor Builder 1.5.1 Themehunk Contact Form & Lead Form Elementor Builder 1.5.2 Themehunk Contact Form & Lead Form Elementor Builder 1.5.3 Themehunk Contact Form & Lead Form Elementor Builder 1.5.4 Themehunk Contact Form & Lead Form Elementor Builder 1.5.5 Themehunk Contact Form & Lead Form Elementor Builder 1.5.6 Themehunk Contact Form & Lead Form Elementor Builder 1.5.7 Themehunk Contact Form & Lead Form Elementor Builder 1.5.8 Themehunk Contact Form & Lead Form Elementor Builder 1.5.9 Themehunk Contact Form & Lead Form Elementor Builder 1.6.0 Themehunk Contact Form & Lead Form Elementor Builder 1.6.1 Themehunk Contact Form & Lead Form Elementor Builder 1.6.2 Themehunk Contact Form & Lead Form Elementor Builder 1.6.3 Themehunk Contact Form & Lead Form Elementor Builder 1.6.4 Themehunk Contact Form & Lead Form Elementor Builder 1.6.5 Themehunk Contact Form & Lead Form Elementor Builder 1.6.6 Themehunk Contact Form & Lead Form Elementor Builder 1.6.7 Themehunk Contact Form & Lead Form Elementor Builder 1.6.8 Themehunk Contact Form & Lead Form Elementor Builder 1.6.9	77

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References