High · 7.3 CVE-2026-42377 EUVD-2026-26194GHSA-mv53-6q27-4m6w

WordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerability

Published Apr 29, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects SureForms Pro: from n/a through 2.8.0.

Vendor	Product	Affected	Fixed
Brainstorm Force	SureForms Pro	≤ 2.8.0	—