WordPress WP Forms 1.5.8.2 Cross Site Scripting

Exploit Title: Wordpress Plugin WPForms 1.5.9 - Persistent Cross-Site Scripting Date: 2020-02-18 Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson Varghese Behanan Author Advisory:...

Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting

Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Exploit Title: Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Date: 2020-02-18 Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson...

WordPress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting

Exploit Title: Wordpress Plugin WPForms 1.5.8.2 - Persistent Cross-Site Scripting Date: 2020-02-18 Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson Varghese Behanan Author Advisory:...

Contact Form by WPForms < 1.5.9 - Authenticated Cross-Site Scripting (XSS)

The popular WordPress plugin, WPForms, was found to be vulnerable to Authenticated Cross-Site Scripting XSS. The Form Description and Field Description fields in the WPForms plugin’s Form Builder module was found to be vulnerable to stored XSS, as they did not sanitize user given input properly...

WordPress nex-forms-express-wp-form-builde plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. nex-forms-express-wp-form-builder is a form builder plugin used in it. A SQL injection vulnerability exists in the...

Sql injection

The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nexformsId parameter...

CVE-2015-9452

The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nexformsId parameter...

CVE-2015-9452: Improper Neutralization of Special Elements used in an SQL Command

The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nexformsId parameter...

Former Cross-Site Scripting Vulnerability

Former is a form builder for frameworks like Laravel. A cross-site scripting vulnerability exists in Former versions prior to 4.2.1, which can be exploited by an attacker to execute client-side code...

WordPress formcraft-form-builder plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. formcraft-form-builder is used in one of the drag-and-drop form builder plugin . A cross-site request forgery vulnerabilit...

CVE-2019-15114

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF...

CVE-2019-15114

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF...

Cross site request forgery (csrf)

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF...

CVE-2019-15114

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF...

CVE-2019-15114

CVE-2019-15114 affects the WordPress FormCraft Form Builder plugin. The vulnerability is a CSRF flaw in versions before 1.2.2, arising from insufficient request verification, potentially allowing unauthorized actions on behalf of a user. Mitigation: upgrade to 1.2.2 or later (as indicated by mult...

PT-2019-13994

Name of the Vulnerable Software and Affected Versions formcraft-form-builder plugin versions prior to 1.2.2 Description The issue allows for CSRF attacks. Recommendations For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue...

CVE-2019-15114: Cross-Site Request Forgery (CSRF)

The formcraft-form-builder plugin before 1.2.2 for WordPress has CSRF...

WordPress Formidable Form Builder plugin <= 4.02 - Unsafe Deserialisation vulnerability

Unsafe Deserialisation vulnerability discovered in WordPress Formidable Form Builder plugin versions = 4.02. Solution Update the WordPress Formidable Form Builder plugin to the latest available version at least 4.02.01...

Formidable < 4.02.01 - Unsafe Deserialisation

The Formidable Form Builder – Contact Form, Survey & Quiz Forms Plugin for WordPress WordPress plugin was affected by an Unsafe Deserialisation security vulnerability...

WordPress Contact Form Builder Plugin < 1.0.69 CSRF Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...