VYPR

Notifications for Forms & WordPress Actions

by WordPress

CVEs (1)

  • CVE-2024-6228Jul 6, 2026
    risk 0.00cvss epss 0.00

    The Notifications for Forms & WordPress Actions WordPress plugin before 2.6 does not validate a user-supplied value before using it to build a server-side file inclusion path, allowing authenticated users with subscriber-level access and above to include and execute arbitrary…