Threats tagged 'ghsa-gx6f-fm4p-x72r'

The Fluent Forms WordPress plugin up to version 6.2.8 contains an authorization bypass vulnerability via the 'transaction' parameter. This flaw allows unauthenticated attackers to brute-force transaction hashes and access sensitive payment receipt data of other users, including personal and payment details. The vulnerability arises from missing validation on a user-controlled key, enabling insecure direct object reference attacks. The brute-force attack is practical due to a limited candidate space of about 900 possibilities per second per submission and form pair.