CVE-2026-78151

5.3 Moyenne

Publiée le 02/09/2026 à 08:17 · Modifiée le 03/09/2026 à 19:50 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission handler, allowing unauthenticated users to disclose notification recipient addresses, confirmation redirect targets and integration settings, including those of unpublished forms.

Traduire en français

Produits concernés

Unknown FormLayer

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-200

Références

https://wpscan.com/vulnerability/ae844713-444f-43bc-9e1e-78f46e1545c7/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories