Vulnerabilities > Rednao > Smart Forms > 2.6.56
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-12-09 | CVE-2023-49856 | Missing Authorization vulnerability in Rednao Smart Forms Missing Authorization vulnerability in RedNao Smart Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through 2.6.84. | 8.8 |
| 2024-04-29 | CVE-2024-33593 | Unspecified vulnerability in Rednao Smart Forms Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91. | 4.3 |
| 2022-03-07 | CVE-2022-0163 | Missing Authorization vulnerability in Rednao Smart Forms The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form. | 6.5 |