Security Advisory

CVE-2023-5098

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-10-31 13:54:44

Last updated 2025-04-23 16:10:21

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.

← Browse all CVEs View on cve.org ↗