11725 matches found
CVE-2025-60151 WordPress WP Gravity Forms HubSpot Plugin <= 1.2.5 - Open Redirection Vulnerability
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Phishing.This issue affects WP Gravity Forms HubSpot: from n/a through = 1.2.5...
CVE-2025-60151
CVE-2025-60151 is an Open Redirect vulnerability in the WP Gravity Forms HubSpot plugin (gf-hubspot) for WordPress, affecting versions up to and including 1.2.5. The issue allows a URL redirection to an untrusted site, supporting phishing scenarios as described in multiple sources (NVD/Red Hat/EU...
CVE-2025-58966 WordPress NEX-Forms LITE plugin < 8.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through 8.2...
CVE-2025-58966 WordPress NEX-Forms LITE plugin < 8.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through 8.2...
CVE-2025-58966
CVE-2025-58966 affects the WordPress plugin NEX-Forms LITE (Basix NEX-Forms LITE, nex-forms-lite) and is described as a Cross-Site Scripting (XSS) vulnerability caused by improper input neutralization during web page generation. The CVE entry indicates the issue is a Reflected XSS affecting NEX-F...
PT-2025-43304
Name of the Vulnerable Software and Affected Versions WP Gravity Forms HubSpot versions through 1.2.5 Description The software contains an open redirect issue, allowing for potential phishing attacks. The issue resides in the way the application handles redirects to untrusted sites. Recommendatio...
PT-2025-43309
Name of the Vulnerable Software and Affected Versions CRM Perks Connector for Gravity Forms and Google Sheets versions through 1.2.6 Description The CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets contains a flaw related to the deserialization of untrusted...
WordPress plugin NEX-Forms LITE 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin WP Gravity Forms HubSpot 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2025-60210: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in wpeverest Everest Forms - Frontend Listing everest-forms-frontend-listing allows Object Injection.This issue affects Everest Forms - Frontend Listing: from n/a through = 1.0.5...
CVE-2025-60209: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in CRM Perks Connector for Gravity Forms and Google Sheets wp-gravity-forms-spreadsheets allows Object Injection.This issue affects Connector for Gravity Forms and Google Sheets: from n/a through = 1.2.6...
WordPress plugin Connector for Gravity Forms and Google Sheets 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A security vulnerabilit...
PT-2025-43310
Name of the Vulnerable Software and Affected Versions Everest Forms - Frontend Listing versions through 1.0.5 Description A flaw exists in Everest Forms - Frontend Listing that allows for object injection due to deserialization of untrusted data. This issue impacts the...
WordPress plugin Everest Forms - Frontend Listing Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
PT-2025-43279
Name of the Vulnerable Software and Affected Versions Basix NEX-Forms LITE versions prior to 8.2 Description A flaw exists in Basix NEX-Forms LITE that allows for Reflected Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page generation. The vulnerabilit...
CVE-2025-58966: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Basix NEX-Forms LITE nex-forms-lite allows Reflected XSS.This issue affects NEX-Forms LITE: from n/a through 8.2...
CVE-2025-60151: URL Redirection to Untrusted Site
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Phishing.This issue affects WP Gravity Forms HubSpot: from n/a through = 1.2.5...
WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.8 - Open Redirection vulnerability
Open Redirection vulnerability discovered by Bonds in WordPress Plugin WP Gravity Forms Zoho CRM and Bigin versions = 1.2.8...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-54253link is external Adobe Experience Manager Forms Code Execution Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...
