WP Manifestindependent plugin directory
manifest / forms / sudowp-crowdsignal-forms

SudoWP Crowdsignal Forms

A security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict authorization checks.

by SudoWP · github.com/sudo-wp/sudowp-crowdsignal-forms · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/sudo-wp/sudowp-crowdsignal-forms/archive/refs/heads/main.zip

Readme

SudoWP Crowdsignal Forms

This is a SudoWP security fork of the original Crowdsignal Forms plugin.

[!WARNING] Security Notice: The original "Crowdsignal Forms" plugin (versions <= 1.7.2) contains a critical Missing Authorization vulnerability (CVE-2025-69015) allowing authenticated users to modify polls they do not own. This SudoWP edition patches this vulnerability.

Installation

  1. Deactivate the original Crowdsignal Forms plugin.
  2. Delete the original Crowdsignal Forms plugin to avoid conflicts.
  3. Install and Activate SudoWP Crowdsignal Forms.

Changelog

1.7.3 - SudoWP Security Release

  • SECURITY: Patched CVE-2025-69015. Restricted REST API management endpoints for Polls, Feedback, and NPS surveys to users with edit_others_posts capability.
  • FEATURE: Added action hooks for form creation/updates (crowdsignal_forms_poll_created, etc.) to support integrations (e.g., Bit Integrations).
  • MODERNIZATION: Enforced strict typing (declare(strict_types=1);).
  • BRANDING: Updated identity to SudoWP.

Disclaimer

This plugin is maintained by the SudoWP community to provide security patches for abandoned or vulnerable plugins.

Read the full README on GitHub →