The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_form_fields' function in all versions up to, and including, 3.2.2. This makes it possible for authenticated attackers, with subscriber access and above, to create form views.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Wordfence
Published: 2024-02-05T21:21:38.352Z
Updated: 2024-07-05T17:21:33.237Z
Reserved: 2024-01-09T20:13:51.978Z
Link: CVE-2024-0372
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-02-05T22:16:00.667
Modified: 2024-02-10T02:19:07.437
Link: CVE-2024-0372
JSON object: View
Redhat Information
No data.
CWE