WordPress Plugin Vulnerabilities | Page 37 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-10-25

Title

FormFacade < 1.3.7 - Reflected Cross-Site Scripting

Slug

Published

2024-12-11

Title

FormFacade < 1.3.7 - Reflected Cross-Site Scripting

Slug

Published

2025-12-31

Title

FormFacade <= 1.4.1 - Cross-Site Request Forgery

Slug

Published

2023-10-02

Title

Contact form Form For All <= 1.2 - Contributor+ Stored XSS

Slug

Published

2025-09-30

Title

FormGent < 1.0.4 - Unauthenticated Arbitrary File Deletion

Slug

Published

2026-03-03

Title

FormGent <= 1.5.5 - Unauthenticated Arbitrary File Deletion

Slug

formget-contact-form

Published

2015-03-07

Title

FormGet Contact Form 5.3 - Stored XSS

Slug

formget-contact-form

Published

2023-09-22

Title

Contact Form by FormGet <= 5.5.5 - Contributor+ Stored XSS

Slug

Published

2014-05-11

Title

Formidable Forms Pro < 1.06.03 - Arbitrary File Upload via ofc_upload_image.php

Slug

Published

2016-01-26

Title

Formidable Forms < 2.0 - Authenticated Blind SQL Injection

Slug

Published

2017-11-13

Title

Formidable Forms < 2.05.03 - Multiple Vulnerabilities

Slug

Published

2019-08-09

Title

Formidable < 4.02.01 - Unsafe Deserialisation

Slug

Published

2021-10-06

Title

Formidable Form Builder < 5.0.07 - Admin+ Stored Cross-Site Scripting

Slug

Published

2021-01-28

Title

Formidable Form Builder < 4.09.05 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2023-02-02

Title

Formidable Forms < 5.5.7 - Arbitrary Entry Deletion via CSRF

Slug

Published

2023-03-06

Title

Formidable Forms < 6.1 - IP Spoofing

Slug

Published

2023-04-06

Title

Formidable Forms < 6.2 - Unauthenticated PHP Object Injection

Slug

Published

2023-06-05

Title

Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

Slug

Published

2024-01-08

Title

Formidable Forms < 6.7.1 - HTML Injection

Slug

Published

2024-01-08

Title

Formidable Forms < 6.7.1 - Admin+ Stored Cross-Site Scripting

Slug

Published

2024-01-26

Title

Formidable Forms < 6.8 - CSRF to Stored Cross-Site Scripting

Slug

Published

2024-07-30

Title

Formidable Forms < 6.11.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Slug

Published

2024-10-31

Title

Formidable Forms < 6.14.1 - Admin+ Stored XSS

Slug

Published

2024-11-22

Title

Formidable Forms < 6.16.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter

Slug

Published

2026-03-12

Title

Formidable Forms < 6.29 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter