WordPress · Smart Forms · CVE-2024-1307
**Name of the Vulnerable Software and Affected Versions**
The Smart Forms WordPress plugin versions prior to 2.6.94
**Description**
The issue is related to improper authorization in some actions within the plugin, allowing users with a low role, such as a subscriber, to perform unauthorized actions.
**Recommendations**
For versions prior to 2.6.94, update to version 2.6.94 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive actions and functionality to higher-role users until the update can be applied.