CyberRota Analysis
AI-GeneratedThe MetForm WordPress plugin prior to version 4.3.1 is vulnerable due to improper access restrictions on a debug file created in the web root during form submissions with HubSpot Forms integration enabled. This flaw allows unauthenticated attackers to access sensitive API response data, including correlation identifiers and cookies, potentially leading to data exposure or further exploitation. WordPress site administrators using the MetForm plugin should prioritize updating to version 4.3.1 or later to mitigate this risk.
Original NVD Description
The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers and cookies.