Doppler Forms, CVE-2025-9544

CVE, Research URL: CVE-2025-9544
Home page URL: Security reports for Doppler Forms
Application: Doppler Forms
Published on: Oct 29, 2025
Research Description: The Doppler Forms WordPress plugin through 2.5.1 registers an AJAX action install_extension without verifying user capabilities or using a nonce. As a result, any authenticated user — including those with the Subscriber role — can install and activate additional Doppler Forms WordPress plugin through 2.5.1 (limited to those whitelisted by the main Doppler Forms WordPress plugin through 2.5.1).
Affected versions: max 2.6.0.
Status: vulnerable