CVE-2023-5098
Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options Update
The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.
CVSS 3.1 · 8.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products