Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions , CVE-2024-5149

CVE, Research URL: CVE-2024-5149
Home page URL: Security reports for Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions
Application: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions
Published on: Jun 05, 2024
Research Description: The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.
Affected versions: Min -, max 2.8.10.
Status: vulnerable

Post Form &#8211; Registration Form &#8211; Profile Form for User Profiles &#8211; Frontend Content Forms for User Submissions , CVE-2024-5149