CVE-2024-1290

The User Registration WordPress plugin (specifically the Formidable Registration plugin) versions prior to 2.12 contains a Broken Authentication vulnerability. This flaw allows users with at least the contributor role to render sensitive shortcodes, which can be used to generate and leak valid pa...