Lucene search
+L

8 matches found

Vulnrichment
Vulnrichment
•added 2025/05/16 3:45 p.m.•16 views

CVE-2025-31915 WordPress Pixel WordPress Form BuilderPlugin & Autoresponder <= 1.0.2 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in kamleshyadav Pixel WordPress Form BuilderPlugin & Autoresponder allows Cross Site Request Forgery. This issue affects Pixel WordPress Form BuilderPlugin & Autoresponder: from n/a through 1.0.2...

5.4CVSS6.9AI score0.00156EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/09 12:00 a.m.•10 views

PT-2025-4410

Name of the Vulnerable Software and Affected Versions Tripetto WordPress form builder plugin versions through 8.0.5 Description The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS, where an attacker ca...

7.1CVSS0.00376EPSS
SaveExploits0References4
CVE
CVE
•added 2024/06/21 1:35 p.m.•78 views

CVE-2022-45803

CVE-2022-45803 affects the WordPress plugin “WordPress Form Builder Plugin – Gutenberg Forms” (

8.8CVSS7.1AI score0.00486EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/06/21 12:00 a.m.•10 views

PT-2024-11716

Name of the Vulnerable Software and Affected Versions Nikolay Strikhar WordPress Form Builder Plugin – Gutenberg Forms versions 2.2.8.3 and earlier Description The issue is related to a Missing Authorization vulnerability. This vulnerability affects the WordPress Form Builder Plugin – Gutenberg...

8.8CVSS0.00486EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/21 12:00 a.m.•5 views

CVE-2022-45803: Missing Authorization

Missing Authorization vulnerability in Nikolay Strikhar WordPress Form Builder Plugin – Gutenberg Forms.This issue affects WordPress Form Builder Plugin – Gutenberg Forms: from n/a through 2.2.8.3...

8.8CVSS7.8AI score0.00486EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•7 views

CVE-2024-0427: Improper Neutralization of Input During Web Page Generation

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.4.1 does not properly escape user-controlled input when it is reflected in some of its AJAX actions...

6.3CVSS5.8AI score0.00358EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/07 12:00 a.m.•8 views

CVE-2024-4621: Improper Neutralization of Input During Web Page Generation

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example ...

4.8CVSS5.9AI score0.00351EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/07 12:00 a.m.•6 views

CVE-2024-4620: Undefined Security Weakness

The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6 allows unauthenticated users to modify uploaded files in such a way that PHP code can be uploaded when an upload file input is included on a form...

9.8CVSS5.8AI score0.03345EPSS
SaveExploits2References1
Rows per page
Query Builder