Flo Forms Security Vulnerabilities and Issues — Flo Forms CVE List

Lucene search

FlothemesFlo Forms

4 matches found

CVE•added 2025/01/02 12:15 p.m.•64 views

CVE-2023-47692

Missing Authorization vulnerability in Flothemes Flo Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flo Forms: from n/a through 1.0.41.

4.3CVSS4.7AI score0.00074EPSS

CVE•added 2024/05/17 11:15 a.m.•52 views

CVE-2024-35174

Missing Authorization vulnerability in Flothemes Flo Forms.This issue affects Flo Forms: from n/a through 1.0.42.

5.3CVSS6.3AI score0.00152EPSS

CVE•added 2023/06/20 2:15 p.m.•33 views

CVE-2023-35095

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Flothemes Flo Forms – Easy Drag & Drop Form Builder plugin

5.9CVSS5.1AI score0.00058EPSS

CVE•added 2023/06/07 2:15 a.m.•25 views

CVE-2021-4367

The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Options Change by using the flo_import_forms_options AJAX action in versions up to, and including, 1.0.35 due to insufficient input sanitization and output escaping along with missing...

6.4CVSS5AI score0.00101EPSS