Skip to content
OpenAdvisories
Medium · 6.4 CVE-2024-56002 EUVD-2024-52901GHSA-wx9w-mg64-m22c

WordPress Contact Form, Survey & Form Builder – MightyForms plugin <= 1.3.9 - Broken Access Control vulnerability

Published Dec 31, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: mightyforms Product: Contact Form, Survey & Form Builder – MightyForms

Description

Missing Authorization vulnerability in mightyforms Contact Form, Survey & Form Builder – MightyForms mightyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form, Survey & Form Builder – MightyForms: from n/a through <= 1.3.9.

Affected products

VendorProductAffectedFixed
mightyforms Contact Form, Survey & Form Builder – MightyForms ≤ 1.3.9 —

References