WordPress WordPress Form Builder Plugin – Gutenberg Forms Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Form Builder Plugin – Gutenberg Forms Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.4.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 994f2f3ecc26 Credits Rafi...

WordPress Contact form builder for Gutenberg - Formello Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Contact form builder for Gutenberg - Formello Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 9de8c7507f30 Credits Rafie...

WordPress WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms Plugin <= 1.6.4 is vulnerable to Cross Site Scripting (XSS)

Software WPEForm Lite – Drag and Drop Live Form Builder for Contact, Payment & Quiz Forms Type Plugin Vulnerable versions = 1.6.4 Fixed in 1.6.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownersh...

WordPress Contact Form By Mega Forms – Drag and Drop Form Builder Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form By Mega Forms – Drag and Drop Form Builder Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 5d66bb9d8b9f...

WordPress WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto Plugin < 7.0.1 is vulnerable to Cross Site Scripting (XSS)

Software WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto Type Plugin Vulnerable versions 7.0.1 Fixed in 7.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim...

WordPress Divi Form Builder With Material Design Plugin < 8.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Divi Form Builder With Material Design Type Plugin Vulnerable versions 8.1.3 Fixed in 8.1.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID e9a0c599a921 Credits Rafie...

CVE-2023-2517

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on the permalinksetup function. This makes it possible for unauthenticated attackers to change...

CVE-2023-2517 Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup

The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on the permalinksetup function. This makes it possible for unauthenticated attackers to change...

CVE-2023-2517

Metform Elementor Contact Form Builder for WordPress is affected by CSRF in versions up to 3.3.2 due to missing/incorrect nonce validation in permalink_setup, enabling unauthenticated attackers to alter permalink structures via forged requests if a site admin is tricked. The issue is caused by no...

WordPress Plugin Metform Elementor Contact Form Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Plugin Forminator – Contact Form, Payment Form & Custom Form Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection

Software Form Builder Type Plugin Vulnerable versions = 1.9.9.0 Fixed in N/A OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2023-23796 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 2e9cd4b8cc95 Credits Rafshanzani Suhada Required privilege Unauthenticate...

WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS)

Software ApplyOnline – Application Form Builder and Manager Type Plugin Vulnerable versions = 2.5.5 Fixed in 2.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-24391 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID...

CVE-2023-23795

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-23795

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-23795 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

CVE-2023-23795

CVE-2023-23795 is a CSRF vulnerability in the WordPress Form Builder (Muneeb Form Builder) plugin

CVE-2023-23795 WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Muneeb Form Builder plugin = 1.9.9.0 versions...

WordPress plugin Form Builder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...