Plugin icon

Flexi – Guest Submit

flexi
Plugin closed

Vulnerabilities:

3

Last Updated:

November 6, 2024

Active Installs:

100

Published
Title
Fixed in
CVSS
Published
2025-10-02
Title
Flexi <= 4.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2025-04-09
Title
Flexi – Guest Submit <= 4.28 - Unauthenticated Local File Inclusion
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2022-02-16
Title
Flexi - Guest Submit < 4.20 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.20
CVSS
6.1 (medium)