The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string “true”, which could lead to a variety of outcomes, including DoS.
CPE | Name | Operator | Version |
---|---|---|---|
campaign_monitor_optin_cat | lt | 2.5.6 |