11688 matches found
CVE-2026-81756
An unauthenticated SQL injection vulnerability exists in the WordPress plugin Smart Marketing SMS and Newsletters Forms in versions
EUVD-2026-68781
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
EUVD-2026-68782
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81296 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81297
Fluent Forms Pro Add On Pack is a WordPress plugin affected by a Subscriber Privilege Escalation vulnerability in versions ≤ 6.2.12 , as discovered by Ananda Dhakal (Patchstack). The CVSS 3.1 score is 7.5 (HIGH) with the vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a network-based attac...
CVE-2026-81297 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81296
CVE-2026-81296 affects the WordPress plugin Fluent Forms Pro Add On Pack (versions
CVE-2026-81296 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
CVE-2026-81297 WordPress Fluent Forms Pro Add On Pack plugin <= 6.2.12 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...
Malicious code in tailwindcss-forms-style (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8948b9d83b1d0eb952b8364b7a15d32efb78d6bed43956bc67a42e151dcfc7a2 Package typosquats @tailwindcss/forms. On require'tailwindcss-forms-style', src/index.js runs evalatob... on a base64 blob appended after...
MAL-2026-15636 Malicious code in tailwindcss-forms-style (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8948b9d83b1d0eb952b8364b7a15d32efb78d6bed43956bc67a42e151dcfc7a2 Package typosquats @tailwindcss/forms. On require'tailwindcss-forms-style', src/index.js runs evalatob... on a base64 blob appended after...
WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability
Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution vulnerability discovered by d.v4ns3c in WordPress Plugin SigmaForms Pro – AI Generated Forms versions = 1.4.5...
CVE-2026-81756: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Smart Marketing SMS and Newsletters Forms = 5.1.24 versions...
PT-2026-84007
Subscriber Privilege Escalation in Fluent Forms Pro Add On Pack = 6.2.12 versions...
PT-2026-84006
Name of the Vulnerable Software and Affected Versions Fluent Forms Pro Add On Pack versions prior to 6.2.13 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions. Recommendations Update to a version newer than 6.2.12...
CVE-2026-81296: Missing Authorization
Unauthenticated Broken Access Control in Fluent Forms Pro Add On Pack = 6.2.12 versions...
The vulnerability of the Forms component in Google Chrome and Microsoft Edge web browsers allows attackers to access sensitive data and influence data integrity.
The vulnerability of the Forms component in Google Chrome and Microsoft Edge browsers is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data...
The vulnerability of the com_baforms component of the Balbooa Forms extension in the Joomla content management system allows a hacker to execute arbitrary code.
The vulnerability of the combaforms component of the Balbooa Forms extension in the Joomla content management system involves unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...