The Soumettre.fr plugin for WordPress is vulnerable to unauthorized access and modification of data due to a improper authorization checks on the make_signature function in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to create/edit/delete Soumettre posts. This vulnerability affects only installations where the soumettre account is not connected (i.e. API key is not installed)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Soumettre Fr Plugin | — | Update soumettre-fr plugin to version 2.1.6, or a newer patched version | Jul 21, 2025 | Jul 1, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub