CVE-2023-30616

Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing nonce check. There is potential for a Cross Site Request Forgery for all form blocks, since it allows to send requests to the forms from any website without a user noticing. Users are advised to upgrade to version 1.0.2. There are no known workarounds for this vulnerability.

• CWE-352

• https://github.com/epiphyt/form-block/commit/cf0012fa0710d906c594346ba775c5dc433a9426Patch
• https://github.com/epiphyt/form-block/security/advisories/GHSA-j4c2-7p87-q824Vendor Advisory
• https://github.com/epiphyt/form-block/commit/cf0012fa0710d906c594346ba775c5dc433a9426Patch
• https://github.com/epiphyt/form-block/security/advisories/GHSA-j4c2-7p87-q824Vendor Advisory

Published

Apr 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30610aws-sigv4 is a rust library for low level request signing in…5.5
• CVE-2023-30611Discourse-reactions is a plugin that allows user to add thei…5.3
• CVE-2023-30612Cloud hypervisor is a Virtual Machine Monitor for Cloud work…4.9
• CVE-2023-30613Kiwi TCMS, an open source test management system, allows use…9
• CVE-2023-30614Pay is a payments engine for Ruby on Rails 6.0 and higher. I…6.1
• CVE-2023-30615Iris is a web collaborative platform aiming to help incident…5.4
• CVE-2023-30617Kruise provides automated management of large-scale applicat…6.5
• CVE-2023-30618Kitchen-Terraform provides a set of Test Kitchen plugins whi…3.3
• CVE-2023-30619Tuleap Open ALM is a Libre and Open Source tool for end to e…5.4
• CVE-2023-3062A vulnerability was found in code-projects Agro-School Manag…9.8
• CVE-2023-30620mindsdb is a Machine Learning platform to help developers bu…7.5
• CVE-2023-30621Gipsy is a multi-purpose discord bot which aim to be as modu…9.8