CVE-2026-66425

MediumCVSS 6.5

Published: 06/08/2026(UTC)Updated: 24/10/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

36th percentile - higher than 36% of all known CVEs

Summary

Broken Authentication vulnerability in Gutena Forms versions up to 1.9.0 allows an unauthenticated attacker to bypass authentication mechanisms.

Risk Assessment

An unauthorized attacker can gain access to form functionality and data, potentially leading to confidentiality and integrity breaches.

Recommendation

Update the Gutena Forms plugin to the latest version that includes the security fix.

Other vulnerabilities in Gutena Forms

CVE-2026-11995Medium
The Gutena Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to and including 1.9.0 due to improper verification of user permissions. This allows unauthenticated attackers to modify the read/unread status or permanently trash arbitrary form submission entries.

Original NVD description (English source)

Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS