Cpe:2.3:a:buddyforms:buddyforms:*:*:*:*:*:wordpress:*:*

The BuddyForms WordPress plugin is vulnerable to unauthenticated privilege escalation via a form-type confusion flaw that allows attackers to create administrator accounts.