CVE-2026-1753

The Gutena Forms WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and array options (such as users_can_register).

Score

CVSS 3.1 6.8 Medium

Status

Deferred - contact@wpscan.com

Published

2026-03-11

Last modified

2026-03-11

Weaknesses

CWE-639

Affected products

• Gutena Forms (Unknown)

References

• https://wpscan.com/vulnerability/c42dbab9-b729-4748-88e5-0bd2f6d66e3d/