{"id":"CVE-2026-84253","published":"2026-10-11T07:17:25.057","lastModified":"2026-10-13T20:36:00.850","description":"The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the option to be updated belongs to the click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3. As a result, unauthenticated attackers could change arbitrary blog options, allowing them to create a new administrator account and take over the site.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/7df795df-1b4c-4b82-84ec-4a14d82592e5/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The click5 CRM add-on for Gravity Forms lacks proper authorization and CSRF protection when updating blog options through a REST endpoint, allowing unauthenticated attackers to modify arbitrary settings and create administrator accounts for complete site takeover.","exploitability":"Very easy to exploit with no prerequisites; attackers can directly call the vulnerable REST endpoint without authentication or CSRF tokens to modify any blog option.","blast_radius":"High impact across all affected WordPress sites using this specific add-on version, potentially leading to full administrative control and data compromise.","remediation":"Upgrade to version 1.0.4 or later of the click5 CRM add-on for Gravity Forms plugin","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","config-modification","wordpress","crm"],"model":"garnet-coder","analyzedAt":"2026-10-12T08:50:37.462Z"}}