A vulnerability was found in Contact Form & Lead Form Elementor Builder Plugin up to 1.7.3 on WordPress. It has been declared as critical. This vulnerability affects unknown code of the component Setting Handler. The manipulation leads to missing authorization.

This vulnerability was named CVE-2022-23180. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.