Approved changes feed: RSS · Atom

cpe:2.3:a:creativewerkdesigns:wpsyncsheets_for_wpforms_–_google_sheets_connector_for_wpforms_&_real‑time_data_export:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCreativewerkdesigns (b3f5d236-e351-5e09-a832-42b2c53fea03)
ProductWpsyncsheets For Wpforms – Google Sheets Connector For Wpforms & Real‑Time Data Export (537279b5-0451-59a2-9f4e-22b7eea79c99)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12164 vulnerable 2026-06-08 06:23:51.370578 WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
MEDIUM (4.3)
The WPSyncSheets Lite For WPForms – WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsslwp_reset_settings() function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's settings.
Published: 2025-02-12T04:22:14.942Z
Updated: 2026-04-08T17:04:13.800Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.