Threat database

The Forms Rb plugin for WordPress up to version 1.1.9 contains an authorization bypass vulnerability. Authenticated users with contributor-level access or higher can exploit this flaw to read, modify, and delete form submission data and configuration for forms they do not own. The vulnerability arises from improper verification of user authorization. The CVSS score is 4.3, indicating medium severity. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.