8.1
High
CVE-2023-5098 The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like…
Description
The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Campaign Monitor Forms by Optin Cat 2.5 | earliest → < 2.5.6 | 2.5.6 |