Threats tagged 'ghsa-59qc-m59w-2g85'

The Forminator Forms WordPress plugin versions prior to 1.58.4 contain a vulnerability where payment enforcement is not performed on the server side if the configured payment gateway is unavailable. This allows unauthenticated users to bypass payment requirements on payment-gated User Registration forms and gain assigned roles, including administrator, once the gateway is reconnected and then disconnected.