Lucene search
+L

12142 matches found

CVE
CVE
•added 2024/12/13 2:24 p.m.•75 views

CVE-2023-40203

CVE-2023-40203: WordPress MailChimp Forms by MailMunch

8.8CVSS8.5AI score0.00706EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/12/13 2:24 p.m.•58 views

CVE-2023-40203 WordPress MailChimp Forms by MailMunch plugin <= 3.1.4 - Broken Access Control

Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4...

4.3CVSS0.00706EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:23 p.m.•46 views

CVE-2023-35051 WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through 1.5.7...

5.4CVSS0.00557EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:23 p.m.•16 views

CVE-2023-35051 WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in cimatti Contact Forms by Cimatti contact-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through = 1.5.7...

5.4CVSS6AI score0.00557EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:23 p.m.•76 views

CVE-2023-35051

CVE-2023-35051 affects the WordPress plugin Contact Forms by Cimatti (≤ 1.5.7). It is a Broken Access Control issue caused by missing authorization checks, enabling improper access. Patchstack documents a fix in 1.5.8; upgrade to 1.5.8 or newer to mitigate. CVSSv3.1 from Patchstack is 5.4 (MEDIUM...

8.8CVSS6AI score0.00557EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/12/13 2:23 p.m.•38 views

CVE-2023-34387 WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS0.0047EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/13 2:22 p.m.•53 views

CVE-2022-45806 WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4...

4.3CVSS0.00519EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/13 2:22 p.m.•14 views

CVE-2022-45806 WordPress Formidable Forms plugin <= 5.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4...

4.3CVSS6AI score0.00519EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/13 2:22 p.m.•86 views

CVE-2022-45806

CVE-2022-45806 affects WordPress Formidable Forms plugin versions up to 5.5.4. The vulnerability is a Missing Authorization / Broken Access Control flaw in the Strategy11 Form Builder Team, allowing improper access due to incorrectly configured access control security levels. Public sources consi...

9.8CVSS6AI score0.00519EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•7 views

PT-2024-12498

Name of the Vulnerable Software and Affected Versions Contact Forms by Cimatti versions 1.5.7 and earlier Description A broken access control vulnerability has been identified in the WordPress Contact Forms by Cimatti plugin. This issue allows exploiting incorrectly configured access control...

8.8CVSS5.4AI score0.00557EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•20 views

WordPress plugin MailChimp Forms by MailMunch has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS8.3AI score0.00706EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•24 views

WordPress plugin Constant Contact Forms has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS8.3AI score0.0047EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•9 views

CVE-2022-45806: Missing Authorization

Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4...

9.8CVSS6AI score0.00519EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•24 views

PT-2024-12864 · Mailmunch · Mailchimp Forms By Mailmunch

Name of the Vulnerable Software and Affected Versions: MailChimp Forms by MailMunch versions prior to 3.1.4 Description: The issue is related to a missing authorization vulnerability in MailChimp Forms by MailMunch, which allows the exploitation of incorrectly configured access control security...

8.8CVSS8.4AI score0.00706EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/13 12:00 a.m.•20 views

PT-2024-11717 · Strategy11 · Formidable Forms

Name of the Vulnerable Software and Affected Versions: Formidable Forms versions n/a through 5.5.4 Description: The issue is related to a missing authorization vulnerability in Strategy11 Form Builder Team Formidable Forms, which allows exploiting incorrectly configured access control security...

9.8CVSS5.9AI score0.00519EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•7 views

CVE-2023-35051: Missing Authorization

Missing Authorization vulnerability in Cimatti Consulting Contact Forms by Cimatti allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Forms by Cimatti: from n/a through 1.5.7...

8.8CVSS6AI score0.00557EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•10 views

CVE-2023-40203: Missing Authorization

Missing Authorization vulnerability in MailMunch MailChimp Forms by MailMunch allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MailChimp Forms by MailMunch: from n/a through 3.1.4...

8.8CVSS8.7AI score0.00706EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•6 views

CVE-2023-34387: Missing Authorization

Missing Authorization vulnerability in Constant Contact Constant Contact Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Constant Contact Forms: from n/a through 2.0.3...

4.3CVSS8.7AI score0.0047EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/12 11:18 a.m.•18 views

WordPress Flaming Forms plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Flaming Forms versions = 1.0.1...

7.1CVSS6.2AI score0.00202EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2024/12/12 6:15 a.m.•24 views

CVE-2024-11052

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the calculations parameter in all versions up to, and including, 3.8.19 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS8.4AI score0.0032EPSS
SaveExploits0References2
Rows per page
Query Builder