WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
form-vibes
Published
2022-11-08
Title
Form Vibes < 1.4.6 - Admin+ SQLi
Slug
form-vibes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
form-vibes
Published
2024-07-11
Title
Form Vibes < 1.4.11 - Authenticated (Subscriber+) SQL Injection via fv_export_data
Slug
form-vibes
Published
2024-09-04
Title
Form Vibes – Database Manager for Forms < 1.4.13 - Missing Authorization in Multiple Functions
Slug
form-vibes
Published
2026-01-05
Title
Form Vibes – Database Manager for Forms < 1.5 - Authenticated (Admin+) SQL Injection
Slug
formafzar
Published
2025-01-07
Title
formafzar < 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
formality
Published
2025-03-17
Title
Formality < 1.5.8 - Unauthenticated Local File Inclusion
Slug
formality
Published
2025-05-01
Title
Formality < 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter
Slug
formality
Published
2025-07-16
Title
Formality < 1.5.10 - Unauthenticated Local File Inclusion
Slug
formaloo-form-builder
Published
2025-01-06
Title
Formaloo Form Maker & Customer Analytics for WordPress & WooCommerce <= 2.1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
formassembly-web-forms
Published
2024-04-16
Title
WP-FormAssembly < 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
formassembly-web-forms
Published
2025-02-17
Title
WP-FormAssembly < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
formatted-post
Published
2025-01-16
Title
Formatted post <= 1.01 - Reflected Cross-Site Scripting
Slug
formbuilder
Published
2016-08-04
Title
FormBuilder <= 1.05 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
formbuilder
Published
2017-01-28
Title
FormBuilder < 1.08 - Cross-Site Request Forgery (CSRF)
Slug
formbuilder
Published
2017-01-28
Title
FormBuilder <= 1.0.7 - Multiple Authenticated SQL Injection
Slug
formbuilder
Published
2012-05-28
Title
Formbuilder < 0.91 - XSS
Slug
formbuilder
Published
2022-03-08
Title
FormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF
Slug
formcraft
Published
2013-12-08
Title
FormCraft - form.php id Parameter SQL Injection
Slug
formcraft
Published
2014-09-17
Title
FormCraft <= 2.0.5 - Arbitrary File Deletion
Slug
formcraft-form-builder
Published
2019-02-26
Title
FormCraft <= 1.2.1 - Cross-Site Request Forgery (CSRF)
Slug
formcraft-form-builder
Published
2022-05-16
Title
FormCraft Basic < 1.2.6 - Admin+ Stored Cross Site Scripting
Slug
formcraft-form-builder
Published
2023-04-19
Title
FormCraft < 1.2.10 - Contributor+ Stored XSS
Slug
formcraft-form-builder
Published
2023-06-05
Title
FormCraft Premium < 3.9.7 - Admin+ SQLi
Slug
formcraft-form-builder
Published
2023-08-02
Title
FormCraft < 1.2.7 - Admin+ Stored XSS