CVE-2023-5098 — Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options Update
The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with t…
Published: 2023-10-31 · CVSS: 8.1 · CVSS 3.1
The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7