Gravity Booster 8211 Styles Amp Layouts For Gravity Forms
Monthly
Broken access control in Gravity Booster - Styles & Layouts for Gravity Forms (WordPress plugin by WPMonks) through version 6.0 permits any authenticated subscriber to invoke functionality restricted to higher-privileged roles, yielding limited but real confidentiality and integrity impact. Reported by Patchstack and catalogued as EUVD-2026-60813, the flaw stems from missing authorization checks (CWE-862) on plugin operations, enabling subscriber-level users to read or modify form style and layout configurations beyond their intended permissions. No public exploit code and no active exploitation have been identified at time of analysis.
Broken access control in Gravity Booster - Styles & Layouts for Gravity Forms (WordPress plugin by WPMonks) through version 6.0 permits any authenticated subscriber to invoke functionality restricted to higher-privileged roles, yielding limited but real confidentiality and integrity impact. Reported by Patchstack and catalogued as EUVD-2026-60813, the flaw stems from missing authorization checks (CWE-862) on plugin operations, enabling subscriber-level users to read or modify form style and layout configurations beyond their intended permissions. No public exploit code and no active exploitation have been identified at time of analysis.