approveme vulnerabilities and threats

CVE-2026-65523 is a high-severity vulnerability affecting Formidable Forms Signature Online Contract Automation versions up to and including 2.0.1. It is an unauthenticated Insecure Direct Object Reference (IDOR) issue that allows an attacker to bypass authorization controls by manipulating user-controlled keys. This vulnerability could lead to unauthorized access to sensitive data without requiring authentication.

Missing Authorization vulnerability in approveme WP Forms Signature Contract Add-On wp-forms-signature-contract-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Forms Signature Contract Add-On: from n/a through <= 1.8.2.

Missing Authorization vulnerability in approveme Signature Add-On for Gravity Forms gravity-signature-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Signature Add-On for Gravity Forms: from n/a through <= 1.8.6.