Skip to content
Threat Feed
Subscribe

Vendor

BuddyForms

1 brief RSS
critical advisory

BuddyForms: Privilege escalation via form submission (CVE-2026-107622)

The BuddyForms WordPress plugin is vulnerable to unauthenticated privilege escalation via a form-type confusion flaw that allows attackers to create administrator accounts.

BuddyForms wordpress plugin vulnerability privilege-escalation
2t 1c