← all CVEs

CVE-2026-123148

WordPress IvyForms plugin <= 1.5.1 - Broken Access Control vulnerability

Published 7 Nov 2026 • Updated 7 Nov 2026

Severity: MEDIUM

5.3

CVSS Base Score

Description

Missing Authorization vulnerability in TMS IvyForms ivyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IvyForms: from n/a through 1.5.1.

Affected products (1)

  • TMS IvyForms

Problem types

  • Missing Authorization

Get alerted the moment a CVE like this matches your stack.

Create a free account