CVE-2026-6206 | websoudan MW WP Form Plugin up to 5.1.2 on WordPress _get_post_property_from_querystring authorization

A vulnerability has been found in websoudan MW WP Form Plugin up to 5.1.2 on WordPress and classified as problematic. This affects the function _get_post_property_from_querystring. Performing a manipulation results in authorization bypass.

This vulnerability is cataloged as CVE-2026-6206. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to install a patch to address this issue.