Threats tagged 'ghsa-j45v-p6vj-4j8j'

The Everest Forms plugin for WordPress, up to and including version 3.6.2, suffers from an Insecure Direct Object Reference (IDOR) vulnerability in the get_entry function. This flaw allows authenticated users with custom-level access or higher to access, read, and delete form entries belonging to other users without proper authorization. The vulnerability exposes personally identifiable information submitted through public forms. The CVSS score is 6.5, indicating a medium severity impact.