CVE-2022-0830

The CVE-2022-0830 entry describes a CSRF/XS S vulnerability in the WordPress FormBuilder plugin (<= 1.08). The plugin fails CSRF checks when creating/updating/deleting forms and does not sanitize/escape form field values, enabling an authenticated attacker to cause a logged-in admin to update/...

CVE-2016-10910

The CVE-2016-10910 refers to the WordPress FormBuilder plugin. Affected component: FormBuilder plugin before version 1.06 for WordPress. Description in sources: multiple cross-site scripting (XSS) issues. Practical impact stated: client-side code execution via XSS; exploitation details are not pr...

CVE-2012-6715

CVE-2012-6715 concerns the WordPress Formbuilder plugin, affected versions before 0.9.1. The vulnerability is a stored/reflective XSS via the Referer header, enabling execution of malicious client-side scripts. Documented impact is cross-site scripting; exploitation details beyond this risk descr...