CVE-2026-1753
MEDIUM6.8CVSS v3
—CVSS v2
0.04%
EPSS (exploit probability)
CWE-639CWE
Description
The Gutena Forms WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and array options (such as users_can_register).
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.