cleantalk
Vulnerabilities and Security Researches

Contact Form by WPForms – Drag & Drop Form Builder for WordPress, CVE-2024-56276

CVE, Research URL

CVE-2024-56276

Published on
Jan 07, 2025
Research Description
Missing Authorization vulnerability in WPForms Contact Form by WPForms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by WPForms: from n/a through 1.9.2.2.
Affected versions
Min -, max 1.9.2.3.
Status
vulnerable