The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_view' function in all versions up to, and including, 3.2.2. This makes it possible for authenticated attackers, with subscriber access and above, to modify the titles of arbitrary posts.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Wordfence
Published: 2024-02-05T21:21:40.659Z
Updated: 2024-02-05T21:21:40.659Z
Reserved: 2024-01-09T20:12:46.638Z
Link: CVE-2024-0370
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-02-05T22:16:00.320
Modified: 2024-02-09T17:30:35.817
Link: CVE-2024-0370
JSON object: View
Redhat Information
No data.
CWE