A vulnerability was found in registrationformbuilder Vedrixa Forms Plugin up to 1.1.1 on WordPress. It has been declared as critical . Affected by this issue is the function wp_localize_script of the component Shortcode Handler . Such manipulation leads to missing authorization. This vulnerability is listed as CVE-2026-8692 . The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.