Caldera Forms – More Than Contact Forms < 1.4.0 - Sensitive Information Disclosure

2016-05-24 00:00
Panagiotis Vagenas

Strategic Overview

Status
Patched in 1.4.0
Affected Plugin
Caldera Forms – More Than Contact Forms
Affected Version
< 1.4.0
CVSS
6.5Medium
Weakness type
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
CVE
CVE pending
View all Caldera Forms – More Than Contact Forms vulnerabilities

At a glance

This record tracks a medium-severity Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the Caldera Forms WordPress plugin, affecting versions < 1.4.0. It carries a CVSS score of 6.5 (reachable over the network; low attack complexity; high confidentiality impact). The issue is fixed in version 1.4.0; sites on affected versions should update now. Disclosed May 2016, reported by Panagiotis Vagenas.

Vulnerability Overview

The Caldera Forms – More Than Contact Forms plugin for WordPress is vulnerable to Sensitive Information Disclosure due to missing capability checks on the browse_entries() function that makes it possible for low-level authenticated attackers to retrieve form entries in versions up to 1.4.0.

Technical Analysis

The vector marks this flaw as remotely reachable over the network, with low attack complexity — no special timing or configuration is needed, and no interaction from a victim user. A successful exploit has high impact on confidentiality.

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Caldera Forms < 1.4.0 carries this weakness at browse_entries(), and reaching it takes a caller who can reach the endpoint. Sensitive information exposure means data the application intended to keep internal is returned to a caller who should not be able to see it.

The disclosed data — credentials, tokens, customer records or internal paths — is usually worth more as material for a follow-up attack than as an end in itself. For Caldera Forms the fix is 1.4.0: builds < 1.4.0 are affected, anything from 1.4.0 onward is not.

Remediation

Update to version 1.4.0, or a newer patched version

How does WordSec protect against this?

The fix is the thing that ends this: Caldera Forms 1.4.0 closes this, and updating the plugin is the step that ends it.

  • Alerts

External References

https://www.wordfence.com/threat-intel/vulnerabilities/id/377b8532-61b8-45be-ad7c-c9ff60a7100a

Related records

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C