WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
buddyforms
Published
2024-03-06
Title
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) < 2.8.8 - Missing Authorization
Slug
buddyforms
Published
2024-03-06
Title
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) < 2.8.8 - Missing Authorization to Unauthenticated Media Deletion
Slug
buddyforms
Published
2024-03-06
Title
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) < 2.8.8 - Missing Authorization to Unauthenticated Media Upload
Slug
buddyforms
Published
2024-03-25
Title
BuddyForms < 2.8.6 - Reflected Cross-Site Scripting via page
Slug
buddyforms
Published
2024-04-22
Title
BuddyForms < 2.8.9 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
Slug
buddyforms
Published
2024-06-04
Title
BuddyForms < 2.8.10 - Email Verification Bypass due to Insufficient Randomness
Slug
buddyforms
Published
2024-09-13
Title
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) < 2.8.12 - Authenticated (Contributor+) Privilege Escalation
Slug
buddyforms
Published
2024-09-30
Title
BuddyForms < 2.8.13 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
buddyforms
Published
2025-01-30
Title
Frontend Content Forms for User Submissions (UGC) < 2.8.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
buddyforms
Published
2025-02-21
Title
Frontend Content Forms for User Submissions (UGC) < 2.8.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode
Slug
buddyforms
Published
2025-04-04
Title
BuddyForms <= 2.8.17 - Authenticated (Contributor+) Local File Inclusion
Slug
buddyforms
Published
2025-10-19
Title
BuddyForms <= 2.9.0 - Missing Authorization
Slug
buddyforms-acf
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-anonymous-author
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-attach-posts-to-groups-extension
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-easypin
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
buddyforms-easypin
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
buddyforms-easypin
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-hierarchical-posts
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-hook-fields
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-members
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-posts-to-posts-integration
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-remote
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-review
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buddyforms-ultimate-member
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting