Aller au contenu
Se connecter
4.3 Moyenne

CVE-2026-2022 The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on…

Description

The Smart Forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'rednao_smart_forms_get_campaigns' AJAX action in all versions up to, and including, 2.6.99. This makes it possible for authenticated attackers, with Subscriber-level access and above, to retrieve donation campaign data including campaign IDs and names.

Produits et versions touchés

Produit Versions touchées Corrigé en
Smart Forms – when you need more than just a contact form 2.6 premières → 2.6.99 Pas de correctif indiqué

Autres CVE de Smart Forms – when you need more than just a contact form

Les 3 CVE de Smart Forms – when you need more than just a contact form →
CVE-2026-95816 The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site… 7.2 Élevée CVE-2025-5055 The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site… 4.4 Moyenne
Suivre cette CVE