Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xfxr-j75f-v7p4

Опубликовано: 21 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to re-trigger a form's configured workflow actions such as notification emails and integrations.

The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to re-trigger a form's configured workflow actions such as notification emails and integrations.

EPSS

Процентиль: 11%
0.00203
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
около 1 месяца назад

The Bit Form WordPress plugin before 3.1.0 does not properly validate its workflow-trigger token once the associated transient has expired, allowing unauthenticated attackers to re-trigger a form's configured workflow actions such as notification emails and integrations.

EPSS

Процентиль: 11%
0.00203
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862