CVE-2023-0691

CVE-2023-0691 is an information disclosure vulnerability affecting the Metform Elementor Contact Form Builder for WordPress, specifically versions up to and including 3.3.1. Authenticated attackers with subscriber-level privileges can exploit this flaw to retrieve the last names from arbitrary form submissions. Rated as Medium severity (CVSS 4.3), it requires low attack complexity and user privileges, with a low impact on confidentiality. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.