Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-85308 EUVD-2026-70552GHSA-8v66-4w9q-mgg3

WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability

Published Sep 3, 2026 · Updated Sep 7, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects SureForms: from n/a through 2.12.5.

Affected products

VendorProductAffectedFixed
Brainstorm Force SureForms ≤ 2.12.5 —

References