Lucene search
K

122 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:28 p.m.6 views

CVE-2018-21003

The buddyforms plugin before 2.2.8 for WordPress has SQL injection...

9.8CVSS7.8AI score0.00546EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/28 2:38 a.m.2 views

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS7AI score0.00039EPSS
Exploits0References1
NVD
NVD
added 2025/10/27 2:15 a.m.4 views

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS0.00039EPSS
Exploits0References1
OSV
OSV
added 2025/10/27 2:15 a.m.0 views

CVE-2025-62973

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2025/10/27 1:34 a.m.3 views

CVE-2025-62973

CVE-2025-62973 is a Missing Authorization / Broken Access Control vulnerability in Themekraft BuddyForms WordPress plugin, affecting BuddyForms versions from the earliest through 2.9.0. The issue allows Accessing Functionality Not Properly Constrained by ACLs. Public records (NVD, Red Hat, CIRCL,...

5.3CVSS6.6AI score0.00039EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/27 1:34 a.m.2 views

EUVD-2025-35972

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS6.5AI score0.00039EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/27 1:34 a.m.2 views

CVE-2025-62973 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS6.6AI score0.00039EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/27 1:34 a.m.4 views

CVE-2025-62973 WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS0.00039EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.3 views

PT-2025-43845

Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through = 2.9.0...

5.3CVSS7AI score0.00039EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.3 views

WordPress plugin BuddyForms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.3CVSS6.4AI score0.00039EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/19 3:18 p.m.3 views

WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin BuddyForms versions = 2.9.0...

5.3CVSS7AI score0.00039EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-13527

Malware in sbrugna...

9.8CVSS9.5AI score0.00546EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-30616

Malicious code in bioql PyPI...

8.6CVSS6.4AI score0.02073EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-42413

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00116EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-28130

Malicious code in bioql PyPI...

5.8CVSS8.7AI score0.00175EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-9854

Malicious code in bioql PyPI...

7.5CVSS8.2AI score0.01855EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:3 a.m.4 views

CVE-2024-30198

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeKraft BuddyForms allows Reflected XSS.This issue affects BuddyForms: from n/a through 2.8.5...

6.1CVSS8.6AI score0.00175EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:16 a.m.1 views

CVE-2024-5149

The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification...

6.5CVSS5.9AI score0.00359EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:58 a.m.9 views

CVE-2024-47377

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themekraft BuddyForms buddyforms allows Stored XSS.This issue affects BuddyForms: from n/a through = 2.8.12...

5.9CVSS5.9AI score0.00116EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:33 a.m.9 views

CVE-2023-26326

The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. An unauthenticated attacker could leverage this issue to call files using a PHAR wrapper that will deserialize the data and call arbitrary PHP Objects that can be used t...

9.8CVSS7.4AI score0.45041EPSS
Exploits5References1
Rows per page
Query Builder