CVE-2023-2010

Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote

published July 4, 2023

CVSS
—
EPSS
0%
Percentile
28.4
In the wild
Unconfirmed
What it is

The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00359 · 28.4th percentile
Published
2023-07-04T07:23Z
EPSS history
Timeline
  • 04 JUL 07:23Z
    Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote
    cvelistv5