Threats tagged 'ghsa-h8h9-7p7r-7rpq'

The Super Forms – Drag & Drop Form Builder WordPress plugin contains a privilege escalation vulnerability in versions up to and including 6.3.316. This flaw allows authenticated users with Subscriber-level access or higher to overwrite credentials of arbitrary accounts, including administrators, by exploiting insufficient capability checks in the Register & Login add-on. Successful exploitation can lead to full site compromise.