CVE-2024-1307 — Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as low as a subscriber to call them and p…
Published: 2024-04-15 · CVSS: 6.5 · CVSS 3.1
The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as low as a subscriber to call them and perform unauthorized actions
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7