WordPress Plugin Vulnerabilities | Page 42 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2025-01-24

Title

Forminator < 1.38.3 - Admin+ Stored XSS

Slug

Published

2025-01-30

Title

Forminator < 1.38.3 - Reflected XSS via Title Parameter

Slug

Published

2025-02-26

Title

Forminator < 1.39.3 - Contributor+ Stored Cross-Site Scripting

Slug

Published

2025-04-16

Title

Forminator < 1.42.1 - Contributor+ Stored XSS via 'limit'

Slug

Published

2025-04-16

Title

Forminator < 1.42.1 - Order Replay Vulnerability

Slug

Published

2025-06-04

Title

Forminator < 1.44.2 - Contributor+ Stored DOM-Based XSS via id and data-size Parameters

Slug

Published

2025-07-01

Title

Forminator Forms < 1.44.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submission Deletion

Slug

Published

2025-07-01

Title

Forminator Forms < 1.44.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion

Slug

Published

2025-07-17

Title

Forminator Forms < 1.45.1 - Admin+ SQLi

Slug

Published

2026-01-08

Title

Forminator Forms < 1.49.2 - Forminator User+ CSV Export

Slug

Published

2026-02-16

Title

Forminator Forms < 1.50.3 - Admin+ Stored XSS

Slug

Published

2026-02-22

Title

Forminator < 1.50.3 - Missing Authorization

Slug

Published

2026-05-04

Title

Forminator < 1.52.1 - Unauthenticated Missing Authorization to Payment Bypass

Slug

Published

2026-05-04

Title

Forminator < 1.52.2 - Unauthenticated Arbitrary File Read via 'upload-1[file][file_path]' Parameter

Slug

Published

2026-05-06

Title

Forminator < 1.53.0.1 - Subscriber+ Scheduled Form Submissions Export

Slug

Published

2026-05-06

Title

Forminator < 1.52 - Subscriber+ Module Management Actions

Slug

Published

2026-06-24

Title

Forminator < 1.53.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-07-08

Title

Forminator < 1.55.0.2 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2026-07-08

Title

Forminator < 1.55.1 - Unauthenticated Arbitrary File Read

Slug

Published

2026-07-05

Title

FormLayer < 1.0.7 - Unauthenticated Information Exposure

Slug

Published

2024-07-19

Title

FormLift for Infusionsoft Web Forms < 7.5.18 - Unauthenticated SQL Injection

Slug

Published

2025-03-28

Title

FormLift for Infusionsoft Web Forms < 7.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-06-18

Title

FormLift for Infusionsoft Web Forms < 7.5.21 - Reflected Cross-Site Scripting

Slug

Published

2026-03-25

Title

FormLift for Infusionsoft Web Forms < 7.5.22 - Missing Authorization to Unauthenticated Infusionsoft Connection Hijack via OAuth Connection Flow

Slug

forms-3rdparty-post-again

Published

2024-11-04

Title

Forms: 3rd-Party Post Again <= 0.3 - Reflected Cross-Site Scripting