CVE-2022-2567

The CVE-2022-2567 entry applies to the WordPress plugin Form Builder CP, prior to version 1.2.32. The vulnerability arises from insufficient sanitisation/escaping of certain form settings, enabling Stored Cross-Site Scripting (XSS) by high-privilege users (e.g., admins). The risk exists even when...

CVE-2024-13680

Summary: CVE-2024-13680 affects the WordPress plugin Form Builder CP (shortcode CP_EASY_FORM_WILL_APPEAR_HERE) and describes an SQL Injection in the id parameter across versions up to 1.2.41 due to insufficient escaping and lack of query parameterization. Impact (as stated): Authenticated attacke...