CVE-2023-49856: WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability
Missing Authorization vulnerability in EDGARROJAS Smart Forms smart-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through <= 2.6.84.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49856?
CVE-2023-49856 is classified as a critical vulnerability due to its potential to exploit incorrectly configured access controls.
How do I fix CVE-2023-49856?
To fix CVE-2023-49856, ensure that access control security levels are correctly configured in RedNao Smart Forms and upgrade to the latest version beyond 2.6.84.
What versions of RedNao Smart Forms are affected by CVE-2023-49856?
CVE-2023-49856 affects RedNao Smart Forms from an unspecified version up to and including version 2.6.84.
Can CVE-2023-49856 be exploited remotely?
Yes, CVE-2023-49856 can potentially be exploited remotely due to the missing authorization issues.
Who is at risk of CVE-2023-49856?
Users of RedNao Smart Forms and the WordPress Smart Forms plugin up to version 2.6.84 are at risk of CVE-2023-49856.