Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization within the save_gutena_forms_schema() function in all versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to update option values to a structured array value on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values, that would, for example enable site user registration when it is explicitly disabled.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
⚡ New CVE Alert: CVE-2026-1674 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Wordpress Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-1674 #CVE-2026-1674 #CVE #Medium #Wordpress #CyberSecurity #InfoSec https://t.co/gN5rafp0I8
Post summary
The tweet announces CVE-2026-1674, a medium‑severity vulnerability affecting WordPress, and directs readers to the NVD entry for more information.
CVE-2026-1674 Authenticated Option Modification Vulnerability in Gutena Forms WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1674
Post summary
The post merely references the existence of CVE‑2026‑1674 with minimal technical details and no PoC, exploit, or patch information.