CVE-2024-11353: Missing Authorization

The SMS for Lead Capture Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deletemessage function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with Subscriber-level access and...

PT-2024-16928

Name of the Vulnerable Software and Affected Versions SMS for Lead Capture Forms plugin for WordPress versions up to, and including, 1.1.0 Description The issue is caused by a missing capability check on the delete message function, allowing authenticated attackers with Subscriber-level access an...