CVE-2026-118100

Orta

Teknik Veri (Otomatik)

CVSS Skoru: 5.3
EPSS: 0.2%
CWE: CWE-200
KEV Durumu: Hayır

Yayım tarihi: 30 Ekim 2026

The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before exporting its configuration, allowing unauthenticated users to download any form's stored settings, including notification recipient email addresses and reCAPTCHA secret keys that are not shown on the public form.

Referanslar

https://wpscan.com/vulnerability/748ac082-c2cf-4fbf-b41f-363dc881a30e/

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.