Lucene search
+L

4 matches found

CVE
CVE
added 2026/07/08 7:36 a.m.22 views

CVE-2026-57242

Technical details are not publicly available in the provided documents for CVE-2026-57242; monitor Foxit security bulletins for updates on affected products, versions, impact, and remediation.

7.8CVSS6AI score0.00116EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/09/27 6:47 a.m.11 views

CVE-2025-9898 cForms – Light speed fast Form Builder <= 3.0.0 - Cross-Site Request Forgery

The cForms – Light speed fast Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the cformsapi function. This makes it possible for unauthenticated attackers to modify...

4.3CVSS0.00124EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/04 4:15 p.m.5 views

CVE-2022-0830

The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms, and does not sanitise as well as escape its form field values. As a result, attackers could make logged in admin update and delete arbitrary forms via a CSRF attack, and put...

6.5CVSS6.7AI score0.00534EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2021/05/06 12:0 a.m.5 views

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Business Directory version...

8.8CVSS7.8AI score0.00672EPSS
SaveExploits2References3
Rows per page
Query Builder