A critical vulnerability in the WPForms plugin, tracked as CVE-2024-11205, allows authenticated users to execute unauthorized payment refunds and cancel subscriptions, impacting over three million websites still using vulnerable versions.
View full story…




