Smart Forms – when you need more than just a contact form, CVE-2024-1307

CVE, Research URL: CVE-2024-1307
Home page URL: Security reports for Smart Forms – when you need more than just a contact form
Application: Smart Forms – when you need more than just a contact form
Published on: Apr 15, 2024
Research Description: The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as low as a subscriber to call them and perform unauthorized actions
Affected versions: max 2.6.94.
Status: vulnerable

Smart Forms &#8211; when you need more than just a contact form, CVE-2024-1307