Lucene search
+L

4 matches found

NVD
NVD
added 2026/01/24 9:15 a.m.13 views

CVE-2026-0633

The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.1.0. This is due to the use of a forgeable cookie value derived only from the entry ID and current user ID without...

3.7CVSS0.00187EPSS
SaveExploits0References2
NVD
NVD
added 2024/12/09 1:15 p.m.15 views

CVE-2023-23725

Missing Authorization vulnerability in Chris Baldelomar Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes: from n/a through 3.46...

4.3CVSS0.00527EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/03 12:0 a.m.7 views

PT-2024-39515 · WordPress · Memberful

Name of the Vulnerable Software and Affected Versions: Memberful – Membership Plugin versions up to, and including, 1.73.7 Description: The issue is a Stored Cross-Site Scripting vulnerability due to insufficient input sanitization and output escaping on user-supplied attributes in the plugin's...

6.4CVSS6AI score0.00303EPSS
SaveExploits0References11
OSV
OSV
added 2019/09/20 3:15 p.m.5 views

CVE-2016-10996

The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak...

5.3CVSS5.8AI score0.01092EPSS
SaveExploits0References2
Rows per page
Query Builder