Filtered by vendor Formsplayer Subscriptions
Filtered by product Formsplayer Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-78151 2 Formsplayer, Wordpress 2 Formsplayer, Wordpress 2026-09-03 5.3 Medium
The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission handler, allowing unauthenticated users to disclose notification recipient addresses, confirmation redirect targets and integration settings, including those of unpublished forms.