WordPress CVEs

Description

The SureForms plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.13.1 via the '_srfm_email_notification' post meta registration. This is due to setting the 'auth_callback' parameter to '__return_true', which allows unauthenticated access to the metadata. This makes it possible for unauthenticated attackers to extract sensitive data including email notification configurations, which frequently contain vendor-provided CRM/help desk dropbox addresses, CC/BCC recipients, and notification templates that can be abused to inject malicious data into downstream systems.

Affected WordPress components

• SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz Plugin · sureforms
  Confirmed match Active
  Up to and including 1.13.1
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• brainstormforce SureForms – Contact Form, Payment Form & Other Custom Form Builder — Up to and including 1.13.1

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/sureforms/tags/1.13.1/inc/post-types.php#L892
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3391762/sureforms/trunk/inc/post-types.php
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/9e8e239a-0ddf-479e-b94b-7844ff6e9e81?source=cve
• nvd.nist.gov Official NVD record