Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-5331 EUVD-2024-46557GHSA-c69h-4c8j-wh43

Breakdance <= 1.7.2 - Missing Authorization

Published Aug 1, 2024 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Breakdance plugin for WordPress is vulnerable to unauthorized access of data in all versions up to, and including, 1.7.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to export form submissions.

Affected products

VendorProductAffectedFixed
Breakdance Breakdance ≤ 1.7.1 —

References