Description
The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Forminator | < 1.24.1 | 1.24.1 |
References
- https://wpscan.com/vulnerability/d0da4c0d-622f-4310-a867-6bfdb474073a exploit vdb-entry technical-description