CVE-2025-3471

The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the REST API, which could allow Contributor and above roles to perform such action

Score

CVSS 3.1 4.9 Medium

Status

Analyzed - contact@wpscan.com

Published

2025-04-30

Last modified

2025-04-30

Affected products

• Sureforms (Brainstormforce)
• Sureforms (Unknown)

References

• https://wpscan.com/vulnerability/aa21dd2b-1277-4cf9-b7f6-d4f8a6d518c1/