CVE-2022-1442

The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party APIs like that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more, in versions up to and including 2.1.3.
Configurations

Configuration 1

cpe:2.3:a:wpmet:metform_elementor_contact_form_builder:*:*:*:*:*:wordpress:*:*

Information

Published : 2022-05-10 08:15

Updated : 2022-05-18 02:44


NVD link : CVE-2022-1442

Mitre link : CVE-2022-1442

Products Affected
No products.
CWE