Description
WordPress Plugin Smart Forms-when you need more than just a contact form is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently update arbitrary options (such as default_role and users_can_register). WordPress Plugin Smart Forms-when you need more than just a contact form version 2.6.84 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.6.85 or latest