WordPress Plugin Vulnerabilities | Page 34 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2016-07-19

Title

Form Lightbox - Arbitrary Option Update Leading to Admin Account

Slug

Published

2014-08-01

Title

Form Maker 1.6.4 - front_end_form_maker.php Unspecified XSS

Slug

Published

2018-05-01

Title

Form Maker by WD < 1.12.24 - CSV Injection

Slug

Published

2019-04-05

Title

Form Maker by 10Web < 1.13.5 - Cross-Site Request Forgery (CSRF) to LFI

Slug

Published

2019-05-10

Title

Form Maker by 10Web < 1.13.3 - Authenticated SQL Injection

Slug

Published

2020-05-26

Title

Form Maker by 10Web < 1.13.36 - Authenticated SQL Injection

Slug

Published

2020-07-12

Title

Form Maker by 10Web < 1.13.40 - Authenticated Reflected XSS

Slug

Published

2021-07-15

Title

Form Maker < 1.13.60 - Authenticated Stored XSS

Slug

Published

2022-05-09

Title

Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting

Slug

Published

2022-10-03

Title

Form Maker by 10Web < 1.15.6 - Admin+ SQLI

Slug

Published

2023-09-19

Title

Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload

Slug

Published

2023-10-03

Title

Form Maker by 10Web < 1.15.19 - Unauthenticated Stored XSS

Slug

Published

2023-10-03

Title

Form Maker by 10Web < 1.15.19 - Reflected XSS

Slug

Published

2023-10-11

Title

Form Maker < 1.15.21 - Captcha Bypass

Slug

Published

2024-01-26

Title

Form-Maker (twb_form-maker) < 1.15.22 - CSRF to limited RCE

Slug

Published

2024-03-22

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.23 - Sensitive Information Exposure

Slug

Published

2024-04-15

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.24 - Authenticated (Admin+) Stored Cross-Site Scripting

Slug

Published

2024-04-26

Title

Form Maker by 10Web < 1.15.25 - Authenticated (Subscriber+) Stored Self-Based Cross-Site Scripting

Slug

Published

2024-05-07

Title

Form Maker by 10Web < 1.15.25 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-06-10

Title

Form Maker by 10Web < 1.15.26 - Admin+ Stored XSS

Slug

Published

2024-08-09

Title

Form Maker by 10Web < 1.15.27 - Reflected Cross-Site Scripting

Slug

Published

2024-09-25

Title

Form Maker < 1.15.28 - Authenticated (Administrator+) Stored Cross-Site Scripting

Slug

Published

2024-11-10

Title

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.31 - Reflected Cross-Site Scripting via add_query_arg Parameter

Slug

Published

2024-12-03

Title

Multiple Plugins - Contributor+ DOM-Based Stored XSS via FancyBox JavaScript Library

Slug

Published

2024-12-17

Title

Form Maker by 10Web < 1.15.31 - Admin+ Stored XSS