PT-2026-61835 · Undefined · Undefined

Davud Sahibzada · CVE-2026-13694 · Publicado 2026-07-21 · Atualizado 2026-07-21

Mitre

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to re-trigger a form's configured workflow actions such as notification emails and integrations.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-13694

Produtos afetados

Undefined

Referências · 2

• 🔥 https://wpscan.com/vulnerability/3ed474fc-8363-4068-9a12-3d63be4a81bd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-13694 · Nota de Segurança