CVE-2024-1307: Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as low as a subscriber to call them and perform unauthorized actions
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1307?
CVE-2024-1307 has been classified with a high severity due to improper authorization that allows unauthorized actions by low-level users.
How do I fix CVE-2024-1307?
To fix CVE-2024-1307, update the Smart Forms WordPress plugin to version 2.6.94 or later.
Who is affected by CVE-2024-1307?
Users of the Smart Forms WordPress plugin before version 2.6.94 are affected by CVE-2024-1307.
What kind of unauthorized actions can be performed due to CVE-2024-1307?
CVE-2024-1307 allows users with subscriber roles to perform actions that should be restricted to higher privilege users.
Is it safe to use Smart Forms plugin after the fix for CVE-2024-1307?
Yes, it is safe to use the Smart Forms plugin after updating to version 2.6.94 or later to address CVE-2024-1307.