Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
sudowp-crowdsignal-forms — A security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict authorization checks. | Kitploit
Tools/GitHubGitHub/sudo-wp/sudowp-crowdsignal-forms
Authentication & AuthorizationVulnerability AnalysisCode AnalysisWeb SecurityMisconfigurationAPI Security
GitHubsudo-wp/sudowp-crowdsignal-forms

sudowp-crowdsignal-forms

A security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict authorization checks.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View RepositoryWebsite
5 months agoNot yet reviewed

SudoWP Crowdsignal Forms

PHP Version License Status

This is a SudoWP security fork of the original Crowdsignal Forms plugin.

[!WARNING] Security Notice: The original "Crowdsignal Forms" plugin (versions <= 1.7.2) contains a critical Missing Authorization vulnerability (CVE-2025-69015) allowing authenticated users to modify polls they do not own. This SudoWP edition patches this vulnerability.

Installation

  1. Deactivate the original Crowdsignal Forms plugin.
  2. Delete the original Crowdsignal Forms plugin to avoid conflicts.
  3. Install and Activate SudoWP Crowdsignal Forms.

Changelog

1.7.3 - SudoWP Security Release

  • SECURITY: Patched CVE-2025-69015. Restricted REST API management endpoints for Polls, Feedback, and NPS surveys to users with edit_others_posts capability.
  • FEATURE: Added action hooks for form creation/updates (crowdsignal_forms_poll_created, etc.) to support integrations (e.g., Bit Integrations).
  • MODERNIZATION: Enforced strict typing (declare(strict_types=1);).
  • BRANDING: Updated identity to SudoWP.

Disclaimer

This plugin is maintained by the SudoWP community to provide security patches for abandoned or vulnerable plugins.

Download Tool