Lucene search
+L

12078 matches found

CVE
CVE
•added 2025/12/18 7:22 a.m.•44 views

CVE-2025-60089

CVE-2025-60089 describes a Deserialization of Untrusted Data vulnerability in the WordPress plugin WP Gravity Forms FreshDesk Plugin gf-freshdesk (versions n/a through 1.3.5). The underlying issue is object injection via untrusted data during deserialization, as stated in multiple sources. The CV...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/18 7:22 a.m.•10 views

CVE-2025-60090 WordPress WP Gravity Forms Insightly plugin <= 1.1.6 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through = 1.1.6...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 7:22 a.m.•12 views

CVE-2025-60080 WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/18 7:22 a.m.•30 views

CVE-2025-60084

CVE-2025-60084 describes a Deserialization of Untrusted Data vulnerability in the WordPress plugin PDF for Elementor Forms + Drag And Drop Template Builder. The issue enables Object Injection through untrusted data deserialization in the add-ons.org plugin, with affected versions reported as up t...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 7:22 a.m.•72 views

CVE-2025-60080 WordPress PDF for Gravity Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

7.5CVSS0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 7:22 a.m.•62 views

CVE-2025-60084 WordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 6.5.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

8.8CVSS0.00431EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/18 7:22 a.m.•32 views

CVE-2025-60080

CVE-2025-60080 affects the WordPress plugin PDF for Gravity Forms + Drag And Drop Template Builder (versions n/a to 6.3.0, with related notices in other feeds). Root cause is Deserialization of Untrusted Data leading to Object Injection. This vulnerability is described across multiple sources (Re...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/18 7:22 a.m.•21 views

EUVD-2025-204104

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.3.1...

8.6CVSS6.5AI score0.00431EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/18 6:43 a.m.•21 views

CVE-2025-11924

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugin not properly verifying that a user is authorized before the ninja-forms-views REST endpoints...

7.5CVSS6AI score0.00442EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/18 4:45 a.m.•18 views

CVE-2025-13861

The HTML Forms – Simple WordPress Forms Plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in all versions up to and including 1.6.0 due to insufficient sanitization of fabricated file upload field metadata before displaying it in the WordPress admin dashboard. This...

6.1CVSS5.3AI score0.00257EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•23 views

PT-2025-52138

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.3.0...

7AI score0.00354EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•27 views

PT-2025-52142

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.3.1...

7AI score0.00431EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/18 12:00 a.m.•21 views

PT-2025-52147

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.9...

7AI score0.00469EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•11 views

CVE-2025-60084: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

8.8CVSS5.8AI score0.00431EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•12 views

CVE-2025-60080: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.5.0...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•5 views

CVE-2025-60090: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through = 1.1.6...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•10 views

CVE-2025-60180: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.5.1...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•10 views

CVE-2025-60091: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.9...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•10 views

CVE-2025-60178: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravity Forms HubSpot: from n/a through = 1.2.6...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•9 views

CVE-2025-60089: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through = 1.3.5...

9.8CVSS5.8AI score0.00469EPSS
SaveExploits0References1
Rows per page
Query Builder