CVE-2023-49856

Mô tả

Tham khảo

• patchstack.com/database/Wordpress/Plugin/smart-forms/vulnerability/wordpress-smart-forms-plugin-2-6-84-authenticated-arbitrary-options-change-vulnerability · Third Party Advisory

Lỗ hổng khác của smart forms

• CVE-2024-33593TRUNG BÌNH 4.3Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91.
• CVE-2024-1905TRUNG BÌNH 5.9The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users su…
• CVE-2024-1307TRUNG BÌNH 6.5The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as l…
• CVE-2024-1306TRUNG BÌNH 5.4The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to make logged-in user…
• CVE-2023-7203TRUNG BÌNH 6.1The Smart Forms WordPress plugin before 2.6.87 does not have authorisation in various AJAX actions, which could allow users with a role as l…