Threats tagged 'ghsa-87rp-9h85-83hj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118100The BuddyForms WordPress plugin before 2.10.3 does not check that the requester is allowed to manage a form before High2026-10-30GCVE DatabaseCVE-2026-118100 A vulnerability in the BuddyForms WordPress plugin versions prior to 2.10.3 allows unauthenticated users to export and download the configuration of any form without proper authorization checks. This exposure includes sensitive data such as notification recipient email addresses and reCAPTCHA secret keys that are not publicly visible on the form. Report on CVE-2026-118100 Vulnerability #ghsa-87rp-9h85-83hj	GCVE Database	2026-10-30

Page 1 of 1