Join Another Admin Forum Today for Free!

Join a Forum of Forum and Blog Admins from Around the World. Learn how to create the Best Forum or Blog from Seasoned Experts. Find out how to Promote Your Forum or Blog and Earn Money. Become a Better Admin by joining in on the discussions on Another Admin Forum. Join Today, it’s Free!

Join Now Log in

WPForms Plugin Vulnerability

Shawn Gossman

Shawn Gossman

Administrator
AAF Administrator
AAF Moderator
Joined
Sep 7, 2023
Messages
5,092
Reaction score
532
The vulnerability is due to a missing capability check in a function within the plugin called wpforms_is_admin_page, which means that the plugin doesn’t check for appropriate permissions of the user attempting to make a change with this function. That means that the plugin allows data to be modified by attackers lacking sufficient privileges.
Click to expand...

Recommendations:​

It’s recommended that users of versions WPForms plugin users from versions 1.8.4 up to an including 1.9.2.1 update their plugins.
Click to expand...

Source: WPForms Plugin Vulnerability Affects Up To 6 Million Sites
 
You must log in or register to reply here.
Back
Top Bottom