Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-3649

🗓️ 02 May 2024 17:15:28Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 12 Views

The WPForms plugin for WordPress is vulnerable to price manipulation due to lack of controls, allowing unauthenticated attackers to manipulate prices, product info, and quantities via Stripe payment integratio

Related
Refs
ReporterTitlePublishedViews
Family
CVE		CVE-2024-3649
2 May 202416:52
–cve
Cvelist		CVE-2024-3649 Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation
2 May 202416:52
–cvelist
EUVD		EUVD-2024-32228
3 Oct 202520:07
–euvd
OpenVAS		WordPress WPForms Contact Form Plugin <= 1.8.7.2 Unauthenticated Data Manipulation Vulnerability
11 Feb 202500:00
–openvas
Patchstack		WordPress Contact Form by WPForms plugin <= 1.8.7.2 - Unauthenticated Price Manipulation vulnerability
2 May 202402:33
–patchstack
Patchstack		WordPress Contact Form by WPForms Plugin <= 1.8.7.2 is vulnerable to Broken Access Control
2 May 202400:00
–patchstack
Positive Technologies		PT-2024-27026 · Stripe +1 · Stripe +1
2 May 202400:00
–ptsecurity
RedhatCVE		CVE-2024-3649
23 May 202508:03
–redhatcve
Vulnrichment		CVE-2024-3649 Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation
2 May 202416:52
–vulnrichment
Wordfence Blog		Wordfence Intelligence Weekly WordPress Vulnerability Report (April 29, 2024 to May 5, 2024)
9 May 202416:49
–wordfence
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 07:44Current
5.6Medium risk
Vulners AI Score5.6
CVSS 3.15.3
EPSS0.00679
CWE-472
wpformswordpressprice manipulationunauthenticated attackersproduct infostripe integration
12