26898 matches found
CVE-2025-6679
CVE-2025-6679 concerns the WordPress Bit Form builder plugin. Affected: Bit Form builder for WordPress, versions up to and including 2.20.4. Issue: missing file type validation enables unauthenticated arbitrary file uploads via an advanced file upload element, potentially enabling remote code exe...
CVE-2025-6679 Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload
The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote co...
CVE-2025-6679 Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload
The Bit Form builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 2.20.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote co...
CVE-2025-51451
In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm...
WordPress plugin Bit Form builder 代码问题漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A file upload vulnerability exists in WordPress plugin Bit Form builder 2.20.4 and earlier versions, whi...
PT-2025-33446 · WordPress · Bit Form Builder
Name of the Vulnerable Software and Affected Versions: Bit Form builder plugin for WordPress versions up to and including 2.20.4 Description: The Bit Form builder plugin for WordPress is susceptible to arbitrary file uploads due to a lack of file type validation. This allows unauthenticated...
Linux Distros Unpatched Vulnerability : CVE-2014-2983
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain...
Malicious code in @sellerly/slr-feedback-form (npm)
The package @sellerly/slr-feedback-form was found to contain malicious code...
cli-form (>=0.1.0, <=0.1.4), cli-qa (>=2.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via comma-list (>=0.0.0, <=0.0.1)
comma-list NPM version =0.0.0, =0.1.0, =2.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17400...
Malicious code in taskboard-form-builder (npm)
The package taskboard-form-builder was found to contain malicious code...
cli-form (>=0.0.0, <=0.1.4), kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via config-doc (0.1.0)
config-doc NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on config-doc and may be impacted: - cli-form =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17474...
kik (>=0.0.0, <=1.3.0) potentially affected by unknown CVE via cli-form (0.1.4)
cli-form NPM version 0.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on cli-form and may be impacted: - kik =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17105...
cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +2 more potentially affected by unknown CVE via on-key-press (0.0.0)
on-key-press NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on on-key-press and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =0.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28228...
MAL-2025-7984 Malicious code in @ginger-team/payment-form (npm)
The package @ginger-team/payment-form was found to contain malicious code...
Malicious code in react-chtr-form (npm)
The package react-chtr-form was found to contain malicious code...
Malicious code in mini-redux-form (npm)
The package mini-redux-form was found to contain malicious code...
Malicious code in dynamic-form-components (npm)
The package dynamic-form-components was found to contain malicious code...
cli-form (>=0.0.0, <=0.1.4), cli-qa (>=0.0.0, <=2.3.0) +1 more potentially affected by unknown CVE via read-cli-input (1.0.1)
read-cli-input NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on read-cli-input and may be impacted: - cli-form =0.0.0, =0.0.0, =0.0.0, =1.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31878...