Impact Analysis

This vulnerability allows attackers with contributor-level access or above to access and manipulate form data they should not have permission to handle.

• They can read sensitive form submission records.
• They can modify form configuration options, potentially altering how forms behave.
• They can delete records belonging to any form, leading to data loss.

Useful 0 Not Useful 0

Executive Summary

The Forms Rb plugin for WordPress has an authorization bypass vulnerability in all versions up to and including 1.1.9. This means the plugin does not properly verify whether a user is authorized to perform certain actions.

As a result, authenticated users with contributor-level access or higher can read form submission records, modify form configuration options, and delete records for any form they do not own.

Useful 0 Not Useful 0