Skip to content
Threat Feed
Subscribe

Product

BuddyForms (<= 2.10.5)

1 brief RSS
critical advisory

BuddyForms: Privilege escalation via form submission (CVE-2026-107622)

The BuddyForms WordPress plugin is vulnerable to unauthenticated privilege escalation via a form-type confusion flaw that allows attackers to create administrator accounts.

BuddyForms wordpress plugin vulnerability privilege-escalation
2t 1c