Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-5098

Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options Update

Description

The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Campaign Monitor Forms by Optin Cat

Default version status: unaffected

  • 0 to < 2.5.6affected

References