HIPAA Forms vulnerabilities
We track 1 vulnerability in HIPAA Forms products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest HIPAA Forms vulnerabilities
- 7.2 High severity
HIPAA Forms: Improper Privilege Management
The HIPAA Forms WordPress plugin before 3.3.2 does not perform a capability check when handling a request that rebuilds its own custom user role, allowing a user who already holds that role to grant it administrator-level capabilities and escalate their privil