The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all versions up to, and including, 5.1.16. This makes it possible for unauthenticated attackers to grant users with Fluent Form management permissions which gives them access to all of the plugin's settings and features. This also makes it possible for unauthenticated attackers to delete manager accounts.
The vulnerability results from missing permission verification (missing capability check) on the REST API endpoint /wp-json/fluentform/v1/managers in all plugin versions up to and including 5.1.16. An attacker without any authorization can send a request to this endpoint and grant a selected user Fluent Forms management permissions, thereby obtaining access to all plugin settings and features. The same mechanism also allows deletion of existing plugin manager accounts.
An unauthenticated attacker can take full control over the Fluent Forms plugin configuration by granting unauthorized administrative permissions or removing manager accounts, which may lead to violations of system integrity and availability.
The plugin should be updated to a version higher than 5.1.16. A patch is available in the WordPress repository under changeset 3088078. Immediate update is recommended along with verification of Fluent Forms manager accounts for unauthorized changes.
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder for WordPress — all versions up to and including 5.1.16.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HFluentforms Contact Form
APPFluentforms< 5.1.17
Related vulnerabilities
The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form...
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress...
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress...
The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress...
The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to store...