MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2024-56276

CVSS 4.3v3.1pub. 2025-01-07upd. 2026-04-23

Missing Authorization vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by WPForms: from n/a through <= 1.9.2.2.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

  • Wpforms

    APP
    Wpforms
    < 1.9.2.3
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-11205HIGH8.5ten sam produkt

The WPForms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit...

CVE-2023-7063HIGH7.2ten sam produkt

The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission paramete...

CVE-2020-36919MEDIUM5.1ten sam produkt

WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parame...

CVE-2024-13403MEDIUM6.4ten sam produkt

The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordP...

CVE-2024-11223MEDIUM4.7ten sam produkt

The WPForms WordPress plugin before 1.9.2.3 does not sanitise and escape some of its settings, which could al...