CVE-2025-9544

Doppler Forms <= 2.5.1 - Subscriber+ Limited Plugin Installation

The Doppler Forms WordPress plugin through 2.5.1 registers an AJAX action install_extension without verifying user capabilities or using a nonce. As a result, any authenticated user — including those with the Subscriber role — can install and activate additional Doppler Forms WordPress plugin through 2.5.1 (limited to those whitelisted by the main Doppler Forms WordPress plugin through 2.5.1).

Affected

Doppler Forms

CVSS v3.1 CNA

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.22% chance of exploitation in the next 30 days, 12th percentile

Published

2025-10-29

Updated

2026-04-02

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/06312fba-dfc5-47af-afe3-b01d8941acbf/

References

• CVE Record
• NVD entry