Search vulnerabilities

Results 1

Export CSV
CVE-2023-5098

Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options Update

The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors