Lucene search
K

8173 matches found

NVD
NVD
added 2025/06/06 12:15 p.m.11 views

CVE-2025-48329

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Reflected XSS.This issue affects Real Time Validation for Gravity Forms: from n/a through = 1.7.0...

7.1CVSS0.00185EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 11:48 a.m.5 views

CVE-2025-48329 WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daman Jeet Real Time Validation for Gravity Forms allows Reflected XSS.This issue affects Real Time Validation for Gravity Forms: from n/a through 1.7.0...

7.1CVSS7.2AI score0.00185EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 11:48 a.m.17 views

CVE-2025-48329 WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Reflected XSS.This issue affects Real Time Validation for Gravity Forms: from n/a through = 1.7.0...

7.1CVSS0.00185EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 11:48 a.m.40 views

CVE-2025-48329

CVE-2025-48329 affects WordPress plugin Real Time Validation for Gravity Forms (versions

7.1CVSS5.9AI score0.00185EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 11:37 a.m.9 views

CVE-2025-48328 WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Cross Site Request Forgery.This issue affects Real Time Validation for Gravity Forms: from n/a through = 1.7.0...

4.3CVSS5.9AI score0.00124EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/06 11:37 a.m.15 views

CVE-2025-48328 WordPress Real Time Validation for Gravity Forms plugin <= 1.7.0 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in Daman Jeet Real Time Validation for Gravity Forms real-time-validation-for-gravity-forms allows Cross Site Request Forgery.This issue affects Real Time Validation for Gravity Forms: from n/a through = 1.7.0...

4.3CVSS0.00124EPSS
Exploits0References1
CVE
CVE
added 2025/06/06 11:37 a.m.47 views

CVE-2025-48328

CVE-2025-48328 is a CSRF vulnerability in the WordPress plugin Real Time Validation for Gravity Forms (versions

4.3CVSS5.9AI score0.00124EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.2 views

PT-2025-24088 · Unknown · Daman Jeet Real Time Validation For Gravity Forms

Name of the Vulnerable Software and Affected Versions: Daman Jeet Real Time Validation for Gravity Forms versions 1.7.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS...

7.1CVSS6.6AI score0.00185EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.2 views

WordPress plugin WP Gravity Forms Salesforce 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...

4.7CVSS5AI score0.00263EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.1 views

WordPress plugin Real Time Validation for Gravity Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

7.1CVSS6.2AI score0.00185EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.2 views

WordPress plugin Real Time Validation for Gravity Forms 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS4.8AI score0.00124EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.1 views

WordPress plugin Anti-Spam: Spam Protection | Block Spam Users, Comments, Forms 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Anti-Spam: Spam Protection | Block Spam Users,...

5.4CVSS5.3AI score0.00166EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.3 views

PT-2025-24175 · Unknown · Wp Gravity Forms Salesforce

Name of the Vulnerable Software and Affected Versions: WP Gravity Forms Salesforce versions 1.4.7 and earlier Description: The issue is an 'Open Redirect' vulnerability, which allows URL redirection to untrusted sites, potentially enabling phishing attacks. Recommendations: For versions 1.4.7 and...

4.7CVSS4.6AI score0.00263EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.3 views

PT-2025-24176 · WordPress · Wp Gravity Forms Constant Contact Plugin

Name of the Vulnerable Software and Affected Versions: WP Gravity Forms Constant Contact Plugin versions 1.1.0 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing. This vulnerability can be...

4.7CVSS4.4AI score0.00263EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/06/06 12:0 a.m.4 views

PT-2025-24087 · Gravity Forms · Real Time Validation For Gravity Forms

Name of the Vulnerable Software and Affected Versions: Real Time Validation for Gravity Forms versions 1.7.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed. This issue can be exploited to perform actions on beha...

4.3CVSS4.5AI score0.00124EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.3 views

WordPress plugin WP Gravity Forms Constant Contact Plugin 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error...

4.7CVSS5AI score0.00263EPSS
Exploits0References2
OSV
OSV
added 2025/06/05 12:15 p.m.3 views

CVE-2025-5341

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id' and 'data-size’ parameters in all versions up to, and including, 1.44.1 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.9AI score0.00232EPSS
Exploits0References4
NVD
NVD
added 2025/06/05 12:15 p.m.13 views

CVE-2025-5341

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id' and 'data-size’ parameters in all versions up to, and including, 1.44.1 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS0.00232EPSS
Exploits0References4
CVE
CVE
added 2025/06/05 11:15 a.m.69 views

CVE-2025-5341

CVE-2025-5341 affects the WordPress plugin Forminator Forms – Contact Form, Payment Form & Custom Form Builder. The vulnerability is a Stored Cross‑Site Scripting (XSS) caused by insufficient input sanitization and output escaping in the plugin’s handling of the id and data-size parameters, explo...

6.4CVSS5.7AI score0.00232EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.3 views

WordPress plugin Forminator Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6AI score0.00232EPSS
Exploits0References5
Rows per page
Query Builder