CVE-2023-50903: WordPress Metform Elementor Contact Form Builder plugin <= 3.4.0 - Broken Access Control vulnerability
5.3
CVSS
Description
Missing Authorization vulnerability in Wpmet Metform Elementor Contact Form Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform Elementor Contact Form Builder: from n/a through 3.4.0.
Classification
CVE ID: CVE-2023-50903
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.3
Affected Products
Vendor: Wpmet
Product: Metform Elementor Contact Form Builder
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)