3 matches found
PT-2026-22899
The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization within the save gutena forms schema function in all versions up to, and including, 1.6.0. This...
CVE-2025-13471
The User Activity Log WordPress plugin, in versions 2.2 and earlier , contains a security vulnerability due to the improper handling of failed login attempts in certain scenarios. This flaw allows unauthenticated users to set arbitrary options to 1 , which could enable previously disabled feature...
CVE-2024-3553: Missing Authorization
The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the hidenotices function in all versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to enable us...