Integration for Contact Form 7 and Zoho CRM, Bigin < 1.2.3 - Cross-Site Request Forgery (CSRF)

2023-02-2200:00:00

wpscan.com

contact form 7

zoho crm

csrf vulnerability

EPSS

0.001

Percentile

27.7%

JSON

The plugin does not protect its settings_page action against CSRF attacks, allowing an attacker to update the plugin settings on their behalf by tricking a logged in admin to submit a crafted request.

References

patchstack.com/database/vulnerability/cf7-zoho/wordpress-integration-for-contact-form-7-and-zoho-crm-bigin-plugin-1-2-2-cross-site-request-forgery-csrf-vulnerability

EPSS

0.001

Percentile

27.7%

JSON

Related for WPVDB-ID:00C864B4-1114-4AA9-8DE1-4BB1154A79FA