CVE-2022-0163

Name of the Vulnerable Software and Affected Versions Smart Forms WordPress plugin versions prior to 2.6.71

Description The issue allows any authenticated user to download arbitrary form data due to a lack of authorization in the rednao smart forms entries list AJAX action. This could potentially expose sensitive information, including personally identifiable information (PII), depending on the form's content.

Recommendations For versions prior to 2.6.71, update to version 2.6.71 or later to resolve the issue.