CyberRota Analysis
AI-GeneratedThe FormLayer WordPress plugin prior to version 1.0.9 is vulnerable due to a lack of authorization checks, enabling unauthenticated users to access sensitive configuration details such as notification recipient addresses and integration settings. This exposure could lead to unauthorized disclosure of information, potentially impacting user privacy and security. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate these risks.
Original NVD Description
The FormLayer WordPress plugin before 1.0.9 does not perform any authorization check before returning a form's full stored configuration in the response to its public submission handler, allowing unauthenticated users to disclose notification recipient addresses, confirmation redirect targets and integration settings, including those of unpublished forms.