Description
WordPress Plugin Smart Forms-when you need more than just a contact form is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently to download arbitrary form's data, which could include sensitive information such as PII depending on the form. WordPress Plugin Smart Forms-when you need more than just a contact form version 2.6.70 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.6.71 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:2B6B0731-4515-498A-82BD-D416F5885268
https://plugins.svn.wordpress.org/smart-forms/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Duplicator-WordPress Migration Cross-Site Scripting (0.4.4)
WordPress Plugin Advanced Page Manager Cross-Site Scripting (1.4.1)
Drupal Core 9.3.x Multiple Vulnerabilities (9.3.0 - 9.3.7)
Joomla Improper Input Validation Vulnerability (CVE-2008-4105)
WordPress Plugin WP Airbnb Review Slider SQL Injection (3.2)