WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Missing Authorization vulnerability in Brainstorm Force SureForms sureforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureForms: from n/a through 2.12.9.

Üreticinin çözüm notu (İngilizce)

Update the WordPress SureForms plugin to the latest available version (at least 2.13.0).

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• patchstack.com/…gin-2-12-9-broken-access-control-vulnerability Diğer

Kayıt geçmişi

1. 29 Eki 2026 17:22Yayımlandı

İlgili açıklar

• 5,3 CVE-2026-116402WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability
• 6,3 CVE-2026-82705Apache Wicket: The configured authorization strategy is not applied to an IResource embedded in a component
• 6,9 CVE-2026-82704Apache Wicket: A listener is invoked on a page instance the request itself created and never configured
• 2,3 CVE-2026-82558Apache Wicket: WebSocketBehavior delivers client messages to a component the client may not invoke
• 6,9 CVE-2026-82557Apache Wicket: A disabled or invisible form submitting component is still invoked on a plain form submission
• 6,3 CVE-2026-82115Apache Wicket: The configured authorization strategy is not applied to a shared WebSocketResource