medium5.4

CVE-2025-24604

Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects …

Impact

Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VPSUForm: from n/a through <= 3.0.5.

Affected products

Product	Affected versions
VPSUForm: From N/A Through	through 3.0.5.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-862

References

NVD record
CVE.org record
https://patchstack.com/database/Wordpress/Plugin/v-form/vulnerability/wordpress-lifetime-free-drag-drop-contact-form-builder-for-wordpress-vform-plugin-3-0-5-broken-access-control-vulnerability?_s_id=cve