CVE-2023-48290 WordPress Form Maker by 10Web plugin <= 1.15.20 - Captcha Bypass Vulnerability vulnerability
Attackers can bypass captcha protection in the Form Maker by 10Web WordPress plugin, allowing excessive authentication attempts or spam submissions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-48290?
CVE-2023-48290 is a medium-severity vulnerability in Form Maker by 10Web, published on 4 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Restriction of Excessive Authentication Attempts vulnerability in 10Web Form Builder Team Form Maker by 10Web allows Functionality Bypass.This issue affects Form Maker by 10Web: from n/a through 1.15.20.
Weakness: CWE-307
Which versions are affected by CVE-2023-48290?
It affects 1 product.
Products include 10web Form Maker.
How do I fix CVE-2023-48290?
No fix has been published for CVE-2023-48290 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-48290 being exploited?
There is no known exploitation of CVE-2023-48290 in the wild and no public exploit code.
Other vulnerabilities in Form Maker by 10Web
- CVE-2023-4666 Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
- CVE-2019-10866 SQL injection in n/a
- CVE-2019-11590 Cross-site request forgery in n/a
- CVE-2022-3300 Form Maker by 10Web < 1.15.6 - Admin+ SQLI
- CVE-2024-43220 WordPress Form Maker by 10Web plugin <= 1.15.26 - Reflected Cross Site Scripting (XSS) vulnerability
Sources
Also known as GHSA-q6x2-2p3r-c463.