Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-1753

Gutena Forms < 1.6.1 - Contributor+ Arbitrary Limited Options Update

Description

The Gutena Forms WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and array options (such as users_can_register).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Gutena Forms

Default version status: unaffected

  • 0 to < 1.6.1affected

References