Smart Forms – when you need more than just a contact form, CVE-2024-1306

CVE, Research URL: CVE-2024-1306
Home page URL: Security reports for Smart Forms – when you need more than just a contact form
Application: Smart Forms – when you need more than just a contact form
Published on: Apr 15, 2024
Research Description: The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as editing entries, and we consider it a medium risk.
Affected versions: max 2.6.94.
Status: vulnerable

Smart Forms &#8211; when you need more than just a contact form, CVE-2024-1306