CVE-2024-1905 Smart Forms < 2.6.96 - Admin+ Stored XSS

The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

PT-2022-13004

Name of the Vulnerable Software and Affected Versions Smart Forms WordPress plugin versions prior to 2.6.71 Description The issue allows any authenticated user to download arbitrary form data due to a lack of authorization in the rednao smart forms entries list AJAX action. This could potentially...