WP Manifestindependent plugin directory
manifest / forms / sudowp-crowdsignal-forms

SudoWP Crowdsignal Forms

A security-hardened fork of Crowdsignal Forms. Patches CVE-2025-69015 (Broken Access Control), modernizes for PHP 8.2+, and enforces strict authorization checks.

by SudoWP · github.com/sudo-wp/sudowp-crowdsignal-forms · website

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/sudo-wp/sudowp-crowdsignal-forms/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/sudo-wp/sudowp-crowdsignal-forms ↗

This is a SudoWP security fork of the original Crowdsignal Forms plugin.

[!WARNING] Security Notice: The original "Crowdsignal Forms" plugin (versions <= 1.7.2) contains a critical Missing Authorization vulnerability (CVE-2025-69015) allowing authenticated users to modify polls they do not own. This SudoWP edition patches this vulnerability.

Installation

  1. Deactivate the original Crowdsignal Forms plugin.
  2. Delete the original Crowdsignal Forms plugin to avoid conflicts.
  3. Install and Activate SudoWP Crowdsignal Forms.

Changelog

1.7.3 - SudoWP Security Release

  • SECURITY: Patched CVE-2025-69015. Restricted REST API management endpoints for Polls, Feedback, and NPS surveys to users with edit_others_posts capability.
  • FEATURE: Added action hooks for form creation/updates (crowdsignal_forms_poll_created, etc.) to support integrations (e.g., Bit Integrations).
  • MODERNIZATION: Enforced strict typing (declare(strict_types=1);).
  • BRANDING: Updated identity to SudoWP.

Disclaimer

This plugin is maintained by the SudoWP community to provide security patches for abandoned or vulnerable plugins.