Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:smart_forms_–_when_you_need_more_than_just_a_contact_form:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSmart Forms – When You Need More Than Just A Contact Form (a4eb2822-bdb0-5cd8-be6a-f3db584a761a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0163 vulnerable 2026-06-08 05:39:09.373427 Smart Forms < 2.6.71 - Subscriber+ Form Data Download
The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form.
Published: 2022-03-07T08:16:22.000Z
Updated: 2024-08-02T23:18:41.802Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.