CVE-2025-3471
The SureForms WordPress plugin before 1.4.4 does not have proper authorisation check when updating its settings via the REST API, which could allow Contributor and above roles to perform such action
- Affected products
- Sureforms
- Brainstormforce Sureforms
- < 1.4.4
- Fix
- Available
- CVSS 3.1
- 4.9 MEDIUM
- EPSS
- 0.3% (27th percentile)
- NVD status
- Analyzed
- Published
- 2025-04-30
CVE-2025-3471 at NVD
No indexed exploits for CVE-2025-3471 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2025-3471 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.