CVE-2026-11794

Name of the Vulnerable Software and Affected Versions Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin versions prior to 2.1.1

Description An issue exists where the plugin fails to restrict the WordPress role assigned during user creation from public form submissions. When a non-default configuration is active and an integration maps the user role to a public form field, unauthenticated visitors can create an account with administrator privileges.

Recommendations Update Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin to version 2.1.1 or later.