ThemeHunk Contact Form and Lead Form Elementor Builder Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive system information in the ThemeHunk Contact Form & Lead Form Elementor Builder plugin, specifically in versions through 2.0.1. This issue arises from improper access controls, enabling unauthorized retrieval of embedded sensitive data.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information that is typically restricted, potentially allowing for further exploitation of other vulnerabilities within the system.

Remediation

Users are advised to update to a version later than 2.0.1. Patchstack has issued a mitigation rule to block attacks until an official fix is available.