Description
Unauthenticated Insecure Direct Object References (IDOR) in Toolset Forms <= 2.6.24 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Site Building with Toolset | Toolset Forms | ≤ 2.6.24 | — |
High · 7.5
CVE-2026-56069
EUVD-2026-39722GHSA-xmxx-qpv3-jjw8
WordPress Toolset Forms plugin <= 2.6.24 - Insecure Direct Object References (IDOR) vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack