WordPress Plugin Vulnerabilities | Page 38 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2024-03-29

Title

Forminator < 1.29.1 - Unauthenticated Stored XSS

Slug

Published

2024-03-25

Title

Forminator < 1.29.1 - Reflected Cross-Site Scripting

Slug

Published

2024-04-08

Title

Forminator < 1.29.3 - Contributor+ Stored Cross-Site Scripting via forminator_form Shortcode

Slug

Published

2024-04-18

Title

Forminator < 1.29.0 - Unauthenticated Arbitrary File Upload

Slug

Published

2024-04-18

Title

Forminator < 1.15.4 - Reflected Cross-Site Scripting

Slug

Published

2024-04-18

Title

Forminator < 1.29.3 - Admin+ SQL Injection

Slug

Published

2024-08-01

Title

Forminator < 1.29.2 - HubSpot Developer API Key Sensitive Information Exposure

Slug

Published

2024-09-09

Title

Forminator Forms – Contact Form, Payment Form & Custom Form Builder < 1.34.1 - Reflected Cross-Site Scripting

Slug

Published

2024-10-16

Title

Forminator Forms < 1.36.0 - Draft Quiz Creation via CSRF

Slug

Published

2024-10-16

Title

Forminator Forms < 1.36.0 - Draft Custom Form Creation via CSRF

Slug

Published

2024-10-25

Title

Forminator Forms – Contact Form, Payment Form & Custom Form Builder < 1.36.0 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation

Slug

Published

2024-10-30

Title

Forminator Forms < 1.36.1 - Unauthenticated Arbitrary Quiz Submissions Update

Slug

Published

2025-01-24

Title

Forminator < 1.38.3 - Admin+ Stored XSS

Slug

Published

2025-01-30

Title

Forminator < 1.38.3 - Reflected XSS via Title Parameter

Slug

Published

2025-02-26

Title

Forminator < 1.39.3 - Contributor+ Stored Cross-Site Scripting

Slug

Published

2025-04-16

Title

Forminator < 1.42.1 - Contributor+ Stored XSS via 'limit'

Slug

Published

2025-04-16

Title

Forminator < 1.42.1 - Order Replay Vulnerability

Slug

Published

2025-06-04

Title

Forminator < 1.44.2 - Contributor+ Stored DOM-Based XSS via id and data-size Parameters

Slug

Published

2025-07-01

Title

Forminator Forms < 1.44.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submission Deletion

Slug

Published

2025-07-01

Title

Forminator Forms < 1.44.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion

Slug

Published

2025-07-17

Title

Forminator Forms < 1.45.1 - Admin+ SQLi

Slug

Published

2026-01-08

Title

Forminator Forms < 1.49.2 - Forminator User+ CSV Export

Slug

Published

2026-02-16

Title

Forminator Forms < 1.50.3 - Admin+ Stored XSS

Slug

Published

2024-07-19

Title

FormLift for Infusionsoft Web Forms < 7.5.18 - Unauthenticated SQL Injection

Slug

Published

2025-03-28

Title

FormLift for Infusionsoft Web Forms < 7.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting