Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/03/27 4:59 a.m.3 views

CVE-2026-4281

The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21. This is due to missing capability checks on the connect and listenfortokens methods of the FormLiftInfusionsoftManager class, both of which are hooked ...

5.3CVSS6AI score0.00135EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/26 3:37 a.m.2 views

CVE-2026-4281

The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21. This is due to missing capability checks on the connect and listenfortokens methods of the FormLiftInfusionsoftManager class, both of which are hooked ...

5.3CVSS6AI score0.00135EPSS
Exploits0References11
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.3 views

WordPress plugin FormLift for Infusionsoft Web Forms 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

5.3CVSS5.8AI score0.00135EPSS
Exploits0References10
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.2 views

WordPress plugin FormLift for Infusionsoft Web Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS5.8AI score0.00185EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/22 10:7 a.m.18 views

CVE-2024-38773 WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17...

9.3CVSS0.45041EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/22 10:7 a.m.12 views

CVE-2024-38773 WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17...

9.3CVSS7.7AI score0.45041EPSS
Exploits0References1
Rows per page
Query Builder