CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects WordPress. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-0140
Severity
MEDIUM
CVSS
5.3
EPSS
3.84%
WordPress
Original NVD Description
The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users to see the form entries or export it as a CSV File using the vfb-export endpoint.
Related CVEs
Other vulnerabilities affecting the same vendor(s)