Contact Form by WPForms – Drag & Drop Form Builder for WordPress, CVE-2024-56276

CVE, Research URL: CVE-2024-56276
Home page URL: Security reports for Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Application: Contact Form by WPForms – Drag & Drop Form Builder for WordPress
Published on: Jan 07, 2025
Research Description: Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by WPForms: from n/a through <= 1.9.2.2.
Affected versions: max 1.9.2.3.
Status: vulnerable