August Infotech WordPress Plugin Multi-language Responsive Contact Form Broken Access Control Vulnerability

A broken access control vulnerability has been identified in the August Infotech WordPress plugin 'Multi-language Responsive Contact Form', affecting versions through 2.8. This vulnerability allows users to access functionalities that are not properly restricted by access control mechanisms.

Impact

Exploitation of this vulnerability could lead to unauthorized users performing actions that require higher privileges, potentially allowing them to manipulate form submissions or access restricted features of the plugin.

Remediation

Users of the affected plugin are advised to update to a version beyond 2.8. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate the vulnerability until an official update is available.