The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a var…
CVSS 3.1HIGH 8.1·Network·Low privileges·No interaction·EPSS 0.00739·Published 2023-10-31·Fixed in 2.5.6