WordPress Visual Form Builder plugin <= 3.0.3 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Felipe Restrepo Rodriguez in WordPress Visual Form Builder plugin versions = 3.0.3. Solution Update the WordPress Visual Form Builder plugin to the latest available version at least 3.0.4...

Multiple Cross-Site Scripting Vulnerabilities in Wordpress Visual Form Builder Plugin

WordPress is the WordPress Software Foundation's suite of blogging platforms developed using the PHP language.Visual Form Builder is one of the plug-ins used to build fully functional contact forms. A cross-site scripting vulnerability exists in version 2.8.6 of the WordPress Visual Form Builder...

WordPress Visual Form Builder 2.8.6 Cross Site Scripting

Product: Visual Form Builder Version: 2.8.6 Exploit Author: Sachin Wagh Home page Link: https://wordpress.org/plugins/visual-form-builder/ ============================================================================ Details: The Visual Form Builder plugin for WordPress is prone to a multiple...

Visual Form Builder <= 2.8.2 - SQL Injection & Reflected XSS

The Visual Form Builder WordPress plugin was affected by a SQL Injection & Reflected XSS security vulnerability. PoC SQL Injection ------------- http://www.example.com/wp-admin/admin.php?page=visual-form-builder&form-filter;=1+or+1%3D2...

Visual Form Builder <= 2.8.2 - SQL Injection & Reflected XSS

The Visual Form Builder WordPress plugin was affected by a SQL Injection & Reflected XSS security vulnerability. SQL Injection ------------- http://www.example.com/wp-admin/admin.php?page=visual-form-builder&form-filter=1+or+1%3D2...

WordPress Visual Form Builder Plugin <= 2.8.2 - Multiple Vulnerabilities

This plugin is prone to an SQL injection and reflected cross site scripting vulnerabilities. Solution Update the plugin...

Live Forms - Visual Form Builder 3.0.1 - Blind SQL Injection

The AJAX action ‘getreqlist’ is available to all logged in users. The parameter ‘ipp’ sent to this action is vulnerable to Blind MySQL Injection. This can be leveraged by detecting how long a query takes to return...