Threats tagged 'ghsa-gp98-hm98-x54f'

The BuddyForms WordPress plugin versions before 2.10.1 contain a vulnerability where the plugin does not verify that a user editing an existing entry is the original author. This flaw allows users with edit access to a form, including those with low privileges such as Subscriber, to overwrite the title, content, and status of posts or pages authored by other users, including administrators.