Threat database

Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electronic Signature Add-on for Fluent Forms: from n/a through 2.0.5.

CVE-2026-110378 is a missing authorization vulnerability in the WP E-Signature Ninja Forms Signature Contract Add-On. It affects versions from initial releases up to but not including 3.2.5.1. The flaw allows unauthorized access due to incorrect access control configuration. The vulnerability has a medium severity with a CVSS score of 5.3, indicating a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to information disclosure without integrity or availability effects. No patch or remediation details are provided in the available data.

Unauthenticated Sensitive Data Exposure in Signature Add-On for WooCommerce <= 2.0 versions.