网安资讯详情 - SecLens 情报雷达

CVE-2026-13694 | Bit Form Plugin up to 3.0.x on WordPress Workflow Trigger Token validate authorization

来源： vuldb · 发布时间 2026-07-21 14:54 (UTC+08:00) · 抓取时间 2026-07-21 15:01 (UTC+08:00)

原文链接

摘要

A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, has been found in <a href="https://vuldb.com/product/bit_form_plugin">Bit Form Plugin up to 3.0.x</a> on WordPress. The affected element is the function <code>validate</code> of the component <em>Workflow Trigger Token</em>. This manipulation causes missing authorization. This vulnerability is registered as <a href="https://vuldb.com/cve/CVE-2026-13694">CVE-2026-13694</a>. Remote exploitation of the attack is possible. No exploit is available.

标签

• CVE-2026-13694

扩展字段

{
  "raw_pub_date": "Tue, 21 Jul 2026 08:54:44 +0200"
}