11493 matches found
CVE-2026-95531 WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Conversational Forms for ChatBot = 1.5.0 versions...
CVE-2026-95531
The Conversational Forms for ChatBot WordPress plugin (versions
CVE-2026-95531 WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Conversational Forms for ChatBot = 1.5.0 versions...
CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
EUVD-2026-89837
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120 WordPress GravityExport Lite for Gravity Forms plugin <= 2.7.2 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in GravityExport Lite for Gravity Forms = 2.7.2 versions...
CVE-2026-94120
The GravityExport Lite for Gravity Forms plugin for WordPress (versions
WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Intrudify in WordPress Plugin Ninja Forms versions = 3.15.3...
Exploit for CVE-2026-102425
CVE-2026-102425 — Balbooa Forms combaforms field shortcode...
Malicious Package
Overview tailwind-forms-kit is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in tailwind-forms-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1083ea1ddf83f29a443e7ba4b24db0d24da35dfd0a9d0ac032ae20501ac57ea npm package [email protected] impersonates the @tailwindcss/forms plugin: the package.json name field is ' tailwind-forms-kit' with a leading...
MAL-2026-17310 Malicious code in tailwind-forms-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1083ea1ddf83f29a443e7ba4b24db0d24da35dfd0a9d0ac032ae20501ac57ea npm package [email protected] impersonates the @tailwindcss/forms plugin: the package.json name field is ' tailwind-forms-kit' with a leading...
PT-2026-103554
A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned more data than the form itself required. Anyone who knew the web address of a published form could potentially retrieve th...
PT-2026-103466
Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in The Wikimedia Foundation MediaWiki Page Forms extension allows Stored XSS. This issue affects MediaWiki Page Forms extension: 1.46, 1.45, and 1.43...
PT-2026-103140
Unauthenticated Cross Site Scripting XSS in Ninja Forms = 3.15.3 versions...
CVE-2026-95531: Deserialization of Untrusted Data
Subscriber PHP Object Injection in Conversational Forms for ChatBot = 1.5.0 versions...
PT-2026-103599
Name of the Vulnerable Software and Affected Versions Kiteworks Secure Data Forms affected versions not specified Description An authenticated user can perform a SQL injection by influencing a value derived from their stored account data, which is incorporated into a database query without proper...
PT-2026-103529
Name of the Vulnerable Software and Affected Versions Kiteworks Secure Data Forms versions prior to 9.5.0 Description An issue exists that allows an unauthenticated remote attacker to perform Server-Side Request Forgery SSRF, a technique where the attacker induces the server to make requests to a...