CVE-2026-1753

Gutena Forms < 1.6.1 - Contributor+ Arbitrary Limited Options Update

Medium · published March 11, 2026

CVSS v3.1
6.8
EPSS
0%
Percentile
9.4
In the wild
Unconfirmed
What it is

The Gutena Forms WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and array options (such as users_can_register).

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.4th percentile
Published
2026-03-11T06:00Z
EPSS history
Timeline
  • 11 MAR 06:00Z
    Gutena Forms < 1.6.1 - Contributor+ Arbitrary Limited Options Update
    cvelistv5