TI-2025-00795 CVE-2025-0939 · GHSA-f4wr-g7fq-r234MagicForm - WordPress Form Builder <= 1.6.2 - Missing AuthorizationPriority LOW 28The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing capability check on the plugin's AJAX actions in all versions up to, and including, 1.6.2.CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00298 · Published 2025-02-01 · No fix listed CWE-862