CVE-2025-8450: Unrestricted Upload of File with Dangerous Type

Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page...

Linux Distros Unpatched Vulnerability : CVE-2022-22728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attacker could send a reque...

CVE-2025-54681

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Phishing.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through = 1.2.4...

CVE-2025-54682

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Cross Site Request Forgery.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through = 1.2.4...

CVE-2025-8896: Improper Neutralization of Input During Web Page Generation

The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdprcommunicationpreferences' parameter in all versions up to, and including, 3.14.3 due to insufficient input sanitization and...

CVE-2025-7384

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserialization of untrusted input in the getleaddetail function. This makes it possible for unauthenticated attackers to inject a P...

MAL-2025-28937 Malicious code in paychex-framework-forms (npm)

The package paychex-framework-forms was found to contain malicious code...

MAL-2025-30790 Malicious code in pru-forms (npm)

The package pru-forms was found to contain malicious code...

MAL-2025-35078 Malicious code in test-mlw2-chums-hazed-forms-irked (npm)

The package test-mlw2-chums-hazed-forms-irked was found to contain malicious code...

MAL-2025-35366 Malicious code in test-mlw2-forms-primp (npm)

The package test-mlw2-forms-primp was found to contain malicious code...

Malicious code in paychex-framework-forms (npm)

The package paychex-framework-forms was found to contain malicious code...

Malicious code in test-mlw2-chums-hazed-forms-irked (npm)

The package test-mlw2-chums-hazed-forms-irked was found to contain malicious code...

Malicious code in test-mlw2-forms-primp (npm)

The package test-mlw2-forms-primp was found to contain malicious code...

MAL-2025-14226 Malicious code in akero-forms (npm)

The package akero-forms was found to contain malicious code...

MAL-2025-9598 Malicious code in @vpr/react-forms (npm)

The package @vpr/react-forms was found to contain malicious code...

Malicious code in pru-forms (npm)

The package pru-forms was found to contain malicious code...

Malicious code in akero-forms (npm)

The package akero-forms was found to contain malicious code...

CVE-2025-49557

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker...

CVE-2025-54681

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Phishing.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through = 1.2.4...

CVE-2025-54682

Cross-Site Request Forgery CSRF vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Cross Site Request Forgery.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through = 1.2.4...