Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-1307
HistoryApr 15, 2024 - 5:15 a.m.

CVE-2024-1307

2024-04-1505:15:14
[email protected]
web.nvd.nist.gov
smart forms
wordpress
plugin
vulnerability
authorization

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as low as a subscriber to call them and perform unauthorized actions

Related

wpvulndb 1
cve 1
wpexploit 1
cvelist 1
wordfence 1
wpvulndb
wpvulndb
Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
2024-03-25 00:00:00
cve
cve
CVE-2024-1307
2024-04-15 05:15:14
wpexploit
wpexploit
Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
2024-03-25 00:00:00
cvelist
cvelist
CVE-2024-1307 Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
2024-04-15 05:00:03
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (March 25, 2024 to March 31, 2024)
2024-04-04 17:35:29

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON
Related for NVD:CVE-2024-1307
wpvulndb1cve1wpexploit1cvelist1wordfence1