CVE-2026-77026: Client-Side Enforcement of Server-Side Security

Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension 5.2.5 - The front-end Submissions view did not enforce access control. An unauthenticated visitor could therefore list a form's submissions...

CVE-2022-34867: Exposure of Sensitive Information to an Unauthorized Actor

Unauthenticated Sensitive Information Disclosure vulnerability in WP Libre Form 2 plugin = 2.0.8 at WordPress allows attackers to list and delete submissions. Affects only versions from 2.0.0 to 2.0.8...