title: Contact Form & Lead Form Elementor Builder Plugin < 1.7.4 - Multiple Subscriber+ Settings Update
description: The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks, which could allow any authenticated users, such as subscriber to update and change various settings
problem types: CWE-862 Missing Authorization
affected:
{
vendor: Unknown
product: Contact Form & Lead Form Elementor Builder
versions:
status: affected, versionType: semver, version: 0, lessThan: 1.7.4
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}