The Gutena Forms WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and array options (such as users_can_register).
CVE-2026-1753
NONE
EPSS 0.02%
Updated Mar 11, 2026
WordPress
CVE Details
CVE ID
CVE-2026-1753
Published Date
Mar 11, 2026
Vendor
WordPress
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.02%
Likelihood of exploitation in next 30 days
Percentile:
6.3th percentile (higher than 6.3% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory