61 matches found
CVE-2024-2387
CVE-2024-2387 Advanced Form Integration – Conecta WooCommerce y Contact Form 7 con Google Sheets y otras plataformas = 1.82.0 - Inyección SQL a Cross-Site Scripting Reflejado mediante integrationid Descripción El plugin Advanced Form Integration – Conecta WooCommerce y Contact Form 7 con Google...
WordPress Advanced Form Integration plugin < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability
Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Advanced Form Integration versions 2.1.1...
CVE-2026-16587 Advanced Form Integration <= 2.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function
The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
EUVD-2026-49695
The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-16587
Technical details for CVE-2026-16587 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-16587 Advanced Form Integration <= 2.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function
The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-16587: Missing Authorization
The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...
CVE-2026-11794 Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping
The Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin before 2.1.1 does not restrict the WordPress role assigned when it creates a user from a public form submission, allowing unauthenticated visitors to create an administrator account when an active integration maps the use...
CVE-2026-11794 Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping
The Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin before 2.1.1 does not restrict the WordPress role assigned when it creates a user from a public form submission, allowing unauthenticated visitors to create an administrator account when an active integration maps the use...
CVE-2026-11794
The Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin, in versions before 2.1.1 , is vulnerable to unauthenticated privilege escalation. The root cause is a failure to restrict the WordPress role assigned when a new user is created from a public form submission. Specifically...
CVE-2026-11794: Undefined Security Weakness
The Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin before 2.1.1 does not restrict the WordPress role assigned when it creates a user from a public form submission, allowing unauthenticated visitors to create an administrator account when an active integration maps the use...
PT-2026-54497
The Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin before 2.1.1 does not restrict the WordPress role assigned when it creates a user from a public form submission, allowing unauthenticated visitors to create an administrator account when an active integration maps the use...
CVE-2026-42659
Subscriber Broken Access Control in Advanced Form Integration = 1.126.12 versions...
CVE-2026-42659 WordPress Advanced Form Integration plugin <= 1.126.12 - Broken Access Control vulnerability
Subscriber Broken Access Control in Advanced Form Integration = 1.126.12 versions...
CVE-2026-42659
The CVE concerns WordPress plugin “Advanced Form Integration” (versions
EUVD-2026-36824
Subscriber Broken Access Control in Advanced Form Integration = 1.126.12 versions...
CVE-2026-42659: Missing Authorization
Subscriber Broken Access Control in Advanced Form Integration = 1.126.12 versions...
PT-2026-49450
Subscriber Broken Access Control in Advanced Form Integration = 1.126.12 versions...
WordPress Advanced Form Integration plugin <= 1.126.12 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Idan Vaknin in WordPress Plugin Advanced Form Integration versions = 1.126.12...