WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection

Software Form Builder Type Plugin Vulnerable versions = 1.9.9.0 Fixed in N/A OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2023-23796 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 2e9cd4b8cc95 Credits Rafshanzani Suhada Required privilege Unauthenticate...

WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)

Software ApplyOnline – Application Form Builder and Manager Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24391 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...

CVE-2023-23795

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-23795

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-23795 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-23795

CVE-2023-23795 is a CSRF vulnerability in the WordPress Form Builder (Muneeb Form Builder) plugin

CVE-2023-23795 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

WordPress plugin Form Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

Metform Elementor Contact Form Builder < 3.3.3 - Cross-Site Request Forgery

The plugin does not correctly validate nonces on the permalinksetup function. This can potentially enable the alteration of permalink structure via a forged request, if an administrator is tricked into clicking a deceptive link. Verification only takes place when a nonce is provided, leaving the...

PT-2023-19210 · WordPress · Muneeb Form Builder

Name of the Vulnerable Software and Affected Versions: Muneeb Form Builder plugin versions = 1.9.9.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on a web application...

WordPress Metform Elementor Contact Form Builder Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Metform Elementor Contact Form Builder Type Plugin Vulnerable versions = 3.3.2 Fixed in 3.3.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-2517 Patch priority Low CVSS severity Low 4.3 Developer Wpmet PSID c4b175b1c9ca Credits Marco...

CVE-2023-35095

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Flothemes Flo Forms – Easy Drag & Drop Form Builder plugin = 1.0.40 versions...

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Flothemes Flo Forms – Easy Drag & Drop Form Builder plugin = 1.0.40 versions...

WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Form Builder Type Plugin Vulnerable versions = 1.9.9.0 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-23795 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID be85a3dd50a7 Credits Rafshanzani Suhada...

Form Builder <= 1.9.9.0 - CSRF

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Metform Elementor Contact Form Builder Plugin <= 3.3.0 Missing Authorization Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpmet:metformelementorcontactformbuilder"; if description...

WordPress Metform Elementor Contact Form Builder Plugin < 3.3.2 Multiple Information Disclosure Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpmet:metformelementorcontactformbuilder"; if description...

WordPress Metform Elementor Contact Form Builder Plugin < 3.3.1 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpmet:metformelementorcontactformbuilder"; if description...

WordPress Metform Elementor Contact Form Builder Plugin <= 3.3.1 is vulnerable to Sensitive Data Exposure

Software Metform Elementor Contact Form Builder Type Plugin Vulnerable versions = 3.3.1 Fixed in 3.3.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-0693 Patch priority High CVSS severity High 6.5 Developer Wpmet PSID a48d4f77e351 Credits Ramuel Gall...