CVE-2025-30767
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Mar 27, 2025
CWE ID 862
Summary
CVE-2025-30767 is a missing authorization vulnerability affecting PDF for WPForms, an add-on used on WordPress websites. This issue arises due to incorrectly configured access control security levels, enabling unauthorized users to exploit the flaw and potentially gain sensitive information or perform malicious actions. The vulnerability impacts PDF for WPForms versions from n/a to 5.3.0, and users are strongly urged to update to a secure version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress