Lucene search
K

8166 matches found

Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.3 views

PT-2025-52147

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.9...

7AI score0.00386EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.3 views

PT-2025-52150

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue affects WP Gravity Forms Salesforce: from n/a through = 1.5.1...

7AI score0.00386EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.6 views

PT-2025-52145

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through = 1.3.5...

7AI score0.00386EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.6 views

PT-2025-52146

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through = 1.1.6...

7AI score0.00386EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.3 views

WordPress plugin PDF for Gravity Forms + Drag And Drop Template Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

7.5CVSS6.7AI score0.00291EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.4 views

WordPress plugin PDF for Elementor Forms + Drag And Drop Template Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

8.8CVSS6.7AI score0.00362EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.1 views

WordPress plugin WP Gravity Forms Insightly 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A security...

9.8CVSS6.7AI score0.00386EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

WordPress plugin WP Gravity Forms FreshDesk Plugin 安全漏洞

Grav and others are Grav open source products.Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms, and one-page product presentations.Gravity is a powerful, dynamically typed, lightweight, and embeddable programming language written in C. Des...

9.8CVSS6.7AI score0.00386EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

WordPress plugin WP Gravity Forms Salesforce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

9.8CVSS6.8AI score0.00386EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.3 views

WordPress plugin WP Gravity Forms Zoho CRM and Bigin 安全漏洞

...

9.8CVSS5.8AI score0.00386EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.1 views

WordPress plugin WP Gravity Forms HubSpot 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

9.8CVSS6.7AI score0.00386EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.5 views

PT-2025-52142

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allows Object Injection.This issue affects PDF for Elementor Forms + Drag And Drop Template Builder: from n/a through = 6.3.1...

7AI score0.00362EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:0 a.m.1 views

PT-2025-52138

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Object Injection.This issue affects PDF for Gravity Forms + Drag And Drop Template Builder: from n/a through = 6.3.0...

7AI score0.00291EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.2 views

WordPress plugin WP Gravity Forms Constant Contact Plugin 安全漏洞

...

9.8CVSS5.8AI score0.00386EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/17 7:31 a.m.16 views

WordPress HTML Forms – Simple WordPress Forms Plugin plugin <= 1.6.0 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin HTML Forms versions = 1.6.0...

6.1CVSS5.4AI score0.00215EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/12/17 7:15 a.m.1 views

CVE-2025-11924

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugin not properly verifying that a user is authorized before the ninja-forms-views REST endpoints...

7.5CVSS5.8AI score0.00364EPSS
Exploits0References2
NVD
NVD
added 2025/12/17 7:15 a.m.3 views

CVE-2025-11924

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugin not properly verifying that a user is authorized before the ninja-forms-views REST endpoints...

7.5CVSS0.00364EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/17 6:42 a.m.1 views

CVE-2025-11924 Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugin not properly verifying that a user is authorized before the ninja-forms-views REST endpoints...

7.5CVSS5.6AI score0.00364EPSS
Exploits0References2
CVE
CVE
added 2025/12/17 6:42 a.m.14 views

CVE-2025-11924

CVE-2025-11924 concerns Ninja Forms for WordPress. Affected: Ninja Forms – The Contact Form Builder That Grows With You, versions

7.5CVSS5.6AI score0.00364EPSS
In wildExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/12/17 6:42 a.m.24 views

CVE-2025-11924 Ninja Forms – The Contact Form Builder That Grows With You <= 3.13.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Unscoped Bearer Token

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.13.2. This is due to the plugin not properly verifying that a user is authorized before the ninja-forms-views REST endpoints...

7.5CVSS0.00364EPSS
Exploits0References2
Rows per page
Query Builder