Skip to content
Sign in
5.4 Medium

CVE-2024-1306 The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to…

Description

The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted actions via CSRF attacks, such as editing entries, and we consider it a medium risk.

Affected products and versions

Product Affected versions Fixed in
smart_forms 2.6 earliest → < 2.6.94 2.6.94
Smart Forms 2.6 earliest → < 2.6.94 2.6.94

Other CVEs of smart_forms

The 3 CVEs of smart_forms →
CVE-2024-1307 The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow… 6.5 Medium CVE-2023-7203 The Smart Forms WordPress plugin before 2.6.87 does not have authorisation in various AJAX actions, which could allow… 6.1 Medium
Track this CVE