Skip to content
OpenAdvisories
High · 7.5 CVE-2026-57378 EUVD-2026-43452GHSA-8395-r8x5-xvh5

WordPress Advanced Forms plugin <= 1.9.3.7 - Broken Access Control vulnerability

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by Patchstack

Vendor: Phil Kurth Product: Advanced Forms

Description

Missing Authorization vulnerability in Phil Kurth Advanced Forms advanced-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Forms: from n/a through <= 1.9.3.7.

Affected products

VendorProductAffectedFixed
Phil Kurth Advanced Forms ≤ 1.9.3.7 —

References