WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
formidable
Published
2023-04-06
Title
Formidable Forms < 6.2 - Unauthenticated PHP Object Injection
Slug
formidable
Published
2023-06-05
Title
Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution
Slug
formidable
Published
2024-01-08
Title
Formidable Forms < 6.7.1 - HTML Injection
Slug
formidable
Published
2024-01-08
Title
Formidable Forms < 6.7.1 - Admin+ Stored Cross-Site Scripting
Slug
formidable
Published
2024-01-26
Title
Formidable Forms < 6.8 - CSRF to Stored Cross-Site Scripting
Slug
formidable
Published
2024-07-30
Title
Formidable Forms < 6.11.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
formidable
Published
2024-10-31
Title
Formidable Forms < 6.14.1 - Admin+ Stored XSS
Slug
formidable
Published
2024-11-22
Title
Formidable Forms < 6.16.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter
Slug
formidable
Published
2026-03-12
Title
Formidable Forms < 6.29 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter
Slug
formidable
Published
2026-03-12
Title
Formidable Forms < 6.29 - Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse
Slug
formidable
Published
2026-06-25
Title
Formidable Forms < 6.32.1 - Unauthenticated Payment Bypass via PayPal APPROVAL_PENDING Subscription Status
Slug
formidable
Published
2026-08-25
Title
Formidable Forms < 6.34 - Unauthenticated Stored XSS via 'frm_user_id' Parameter
Slug
formidable-charts
Published
2026-08-26
Title
Formidable Charts < 2.0.2 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameter
Slug
formidable-kinetic
Published
2026-05-26
Title
Formidable Kinetic <= 1.1.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
formidable-registration
Published
2024-02-19
Title
Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover
Slug
formidable-signature
Published
2026-08-11
Title
Formidable Digital Signatures < 3.1 - Unauthenticated Arbitrary File Deletion via Signature Field
Slug
formidable-sms
Published
2017-12-14
Title
Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)
Slug
formidablepro-2-pdf
Published
2023-03-22
Title
Formidable PRO2PDF < 3.11 - Subscriber+ SQLi
Slug
formilla-live-chat
Published
2023-04-21
Title
Live Chat by Formilla < 1.3.1 - Admin+ Stored XSS
Slug
forminator
Published
2019-02-06
Title
Forminator < 1.6 - Authenticated Multiple Vulnerabilities
Slug
forminator
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Slug
forminator
Published
2021-03-01
Title
Multiple Plugins - CSRF Nonce Bypasses
Slug
forminator
Published
2021-10-20
Title
Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting
Slug
forminator
Published
2021-07-14
Title
Forminator < 1.14.12 - Unauthenticated Stored XSS
Slug
forminator
Published
2023-06-12
Title
Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote