WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
force-update-translations
Published
2025-09-22
Title
Force Update Translations < 0.6.0 - Cross-Site Request Forgery
Slug
forcefield
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
forcefield
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
forge
Published
2025-01-31
Title
Forge – Front-End Page Builder <= 1.4.6 - Cross-Site Request Forgery to Stored Cross-site Scripting
Slug
forget-about-shortcode-buttons
Published
2016-02-29
Title
Forget About Shortcode Buttons <= 1.1.1 - XSS
Slug
forget-about-shortcode-buttons
Published
2023-05-11
Title
Forget About Shortcode Buttons < 2.1.3 - CSRF
Slug
form
Published
2014-08-01
Title
Zingiri Form Builder - "error" Cross-Site Scripting
Slug
form-block
Published
2023-04-20
Title
Form Block < 1.0.2 - Form Submission via CSRF
Slug
form-block
Published
2025-08-07
Title
Form Block < 1.5.6 - Unauthenticated Arbitrary File Upload
Slug
form-data-collector
Published
2024-12-02
Title
Form Data Collector < 2.2.4 - Reflected Cross-Site Scripting
Slug
form-forms
Published
2022-06-03
Title
Form - Contact Form <= 1.2.4 - Admin+ Stored Cross-Site Scripting
Slug
form-generator-powered-by-jotform
Published
2025-09-22
Title
Form Generator for WordPress <= 1.52 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
form-lightbox
Published
2016-07-19
Title
Form Lightbox - Arbitrary Option Update Leading to Admin Account
Slug
form-maker
Published
2014-08-01
Title
Form Maker 1.6.4 - front_end_form_maker.php Unspecified XSS
Slug
form-maker
Published
2018-05-01
Title
Form Maker by WD < 1.12.24 - CSV Injection
Slug
form-maker
Published
2019-04-05
Title
Form Maker by 10Web < 1.13.5 - Cross-Site Request Forgery (CSRF) to LFI
Slug
form-maker
Published
2019-05-10
Title
Form Maker by 10Web < 1.13.3 - Authenticated SQL Injection
Slug
form-maker
Published
2020-05-26
Title
Form Maker by 10Web < 1.13.36 - Authenticated SQL Injection
Slug
form-maker
Published
2020-07-12
Title
Form Maker by 10Web < 1.13.40 - Authenticated Reflected XSS
Slug
form-maker
Published
2021-07-15
Title
Form Maker < 1.13.60 - Authenticated Stored XSS
Slug
form-maker
Published
2022-05-09
Title
Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting
Slug
form-maker
Published
2022-10-03
Title
Form Maker by 10Web < 1.15.6 - Admin+ SQLI
Slug
form-maker
Published
2023-09-19
Title
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
Slug
form-maker
Published
2023-10-03
Title
Form Maker by 10Web < 1.15.19 - Unauthenticated Stored XSS
Slug
form-maker
Published
2023-10-03
Title
Form Maker by 10Web < 1.15.19 - Reflected XSS