Lucene search
+L

12013 matches found

Cvelist
Cvelist
•added 2025/09/22 6:26 p.m.•34 views

CVE-2025-59549 WordPress GetResponse Forms Plugin <= 2.6.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fatcatapps GetResponse Forms getresponse allows Stored XSS.This issue affects GetResponse Forms: from n/a through = 2.6.0...

6.5CVSS0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:25 p.m.•6 views

CVE-2025-57933 WordPress Piotnet Forms Plugin <= 1.0.30 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in piotnetdotcom Piotnet Forms allows Cross Site Request Forgery. This issue affects Piotnet Forms: from n/a through 1.0.30...

4.3CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/22 6:25 p.m.•29 views

CVE-2025-57933 WordPress Piotnet Forms Plugin <= 1.0.30 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in piotnetdotcom Piotnet Forms piotnetforms allows Cross Site Request Forgery.This issue affects Piotnet Forms: from n/a through = 1.0.30...

4.3CVSS0.00159EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:25 p.m.•30 views

CVE-2025-57933

Technical details of CVE-2025-57933 are not provided in the connected documents. The initial description notes a CSRF issue in Piotnet Forms affecting versions from n/a to 1.0.30; monitor for official vendor advisories or patches for specifics.

4.3CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/22 6:24 p.m.•27 views

CVE-2025-58006 WordPress WP Gravity Forms Keap/Infusionsoft plugin <= 1.2.6 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft allows Phishing.This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through = 1.2.6...

4.7CVSS0.0028EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/22 6:24 p.m.•26 views

CVE-2025-58006

Technical details for CVE-2025-58006 are not provided in the supplied connected documents. No product/version/impact/fix data is present here; monitor for official advisories and updates.

4.7CVSS5.8AI score0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/22 6:24 p.m.•9 views

CVE-2025-58006 WordPress WP Gravity Forms Keap/Infusionsoft Plugin <= 1.2.4 - Open Redirection Vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft allows Phishing. This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through 1.2.4...

4.7CVSS5.8AI score0.0028EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•18 views

PT-2025-38856

Name of the Vulnerable Software and Affected Versions CRM Perks WP Gravity Forms Keap/Infusionsoft versions through 1.2.4 Description The software contains a flaw that allows for redirection to untrusted sites, potentially enabling phishing attacks. This issue impacts the application's handling o...

4.7CVSS5.8AI score0.0028EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•16 views

WordPress plugin WP Gravity Forms has a vulnerability related to input validation errors with Keap/Infusionsoft.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An input...

4.7CVSS6.5AI score0.0028EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•24 views

PT-2025-39034

Name of the Vulnerable Software and Affected Versions GetResponse Forms versions through 2.6.0 Description An issue exists in GetResponse Forms related to improper neutralization of input during web page generation, leading to a Stored Cross-Site Scripting XSS condition. The issue allows for the...

6.5CVSS5.5AI score0.00209EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•4 views

CVE-2025-57933: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in piotnetdotcom Piotnet Forms piotnetforms allows Cross Site Request Forgery.This issue affects Piotnet Forms: from n/a through = 1.0.30...

4.3CVSS5.8AI score0.00159EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•7 views

CVE-2025-58006: URL Redirection to Untrusted Site

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks WP Gravity Forms Keap/Infusionsoft gf-infusionsoft allows Phishing.This issue affects WP Gravity Forms Keap/Infusionsoft: from n/a through = 1.2.6...

4.7CVSS5.8AI score0.0028EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•14 views

WordPress plugin Piotnet Forms has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

4.3CVSS6.5AI score0.00159EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/22 12:00 a.m.•18 views

WordPress plugin GetResponse Forms has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•9 views

CVE-2025-59549: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fatcatapps GetResponse Forms getresponse allows Stored XSS.This issue affects GetResponse Forms: from n/a through = 2.6.0...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/22 12:00 a.m.•18 views

PT-2025-38783

Name of the Vulnerable Software and Affected Versions Piotnet Forms versions through 1.0.30 Description The software contains a Cross-Site Request Forgery CSRF flaw. This allows attackers to perform actions on behalf of authenticated users. Recommendations Update Piotnet Forms to a version later...

4.3CVSS6.5AI score0.00159EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/09/20 6:11 a.m.•33 views

CVE-2025-9083

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog...

9.8CVSS7AI score0.00541EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/20 12:00 a.m.•13 views

CVE-2025-10489: Missing Authorization

The SureForms – Drag and Drop Contact Form Builder – Multi-step Forms, Conversational Forms and more plugin for WordPress is vulnerable to unauthorized creation of forms due to a missing capability check on the registerposttypes function in all versions up to, and including, 1.12.0. This makes it...

4.3CVSS5.8AI score0.002EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/09/18 11:34 a.m.•186 views

Web-Vulnerability-Scanner

Web Application Vulnerability Scanner Internship Task - 2...

7.6AI score
SaveExploits0
NVD
NVD
•added 2025/09/18 6:15 a.m.•24 views

CVE-2025-9083

The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog...

9.8CVSS0.00541EPSS
SaveExploits1References1
Rows per page
Query Builder