CVE-2023-49856

Description

References

• patchstack.com/database/Wordpress/Plugin/smart-forms/vulnerability/wordpress-smart-forms-plugin-2-6-84-authenticated-arbitrary-options-change-vulnerability · Third Party Advisory

Weitere Schwachstellen in smart forms

• CVE-2024-33593MITTEL 4.3Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91.
• CVE-2024-1905MITTEL 5.9The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users su…
• CVE-2024-1307MITTEL 6.5The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as l…
• CVE-2024-1306MITTEL 5.4The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to make logged-in user…
• CVE-2023-7203MITTEL 6.1The Smart Forms WordPress plugin before 2.6.87 does not have authorisation in various AJAX actions, which could allow users with a role as l…