Happyforms < 1.25.11 - Missing Authorization

2024-02-0500:00:00

wpscan.com

happyforms

plugin

vulnerability

unauthorized access

missing capability check

unauthenticated attackers

9.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin is vulnerable to unauthorized access due to a missing capability check, allowing unauthenticated attackers to perform unauthorized actions.

CPENameOperatorVersion
eq1.25.11

CPE	Name	Operator	Version
		eq	1.25.11

References

patchstack.com/database/vulnerability/happyforms/wordpress-happyforms-plugin-1-25-10-broken-access-control-vulnerability