WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
form-maker
Published
2025-02-03
Title
Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS
Slug
form-maker
Published
2024-12-30
Title
Form Maker by 10Web < 1.15.33 - Admin+ Stored XSS via Theme Title
Slug
form-maker
Published
2025-03-02
Title
Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS
Slug
form-maker
Published
2025-03-03
Title
Form Maker by 10Web < 1.15.30 - Admin+ Stored XSS
Slug
form-maker
Published
2025-03-26
Title
Form Maker by 10Web < 1.15.32 - Admin+ Stored XSS
Slug
form-maker
Published
2025-05-19
Title
Form Maker by 10Web < 1.15.34 - Admin+ Stored XSS
Slug
form-maker
Published
2026-02-02
Title
Form Maker by 10Web < 1.15.36 - Unauthenticated Stored Cross-Site Scripting via SVG file
Slug
form-maker
Published
2026-02-02
Title
Form Maker by 10Web < 1.15.36 - Unauthenticated Stored Cross-Site Scripting via Hidden Field
Slug
form-maker
Published
2026-03-23
Title
Form Maker < 1.15.38 - SQL Injection
Slug
form-maker
Published
2026-04-08
Title
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder < 1.15.39 - Unauthenticated SQL Injection
Slug
form-to-chat
Published
2024-04-05
Title
Form to Chat App < 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
form-to-chat
Published
2026-01-04
Title
Form to Chat App <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
form-to-json
Published
2025-01-16
Title
Form To JSON <= 1.0 - Reflected Cross-Site Scripting
Slug
form-to-sheet
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
form-to-sheet
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
form-vibes
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
form-vibes
Published
2022-11-08
Title
Form Vibes < 1.4.6 - Admin+ SQLi
Slug
form-vibes
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
form-vibes
Published
2024-07-11
Title
Form Vibes < 1.4.11 - Authenticated (Subscriber+) SQL Injection via fv_export_data
Slug
form-vibes
Published
2024-09-04
Title
Form Vibes – Database Manager for Forms < 1.4.13 - Missing Authorization in Multiple Functions
Slug
form-vibes
Published
2026-01-05
Title
Form Vibes – Database Manager for Forms < 1.5 - Authenticated (Admin+) SQL Injection
Slug
formafzar
Published
2025-01-07
Title
formafzar < 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
formality
Published
2025-03-17
Title
Formality < 1.5.8 - Unauthenticated Local File Inclusion
Slug
formality
Published
2025-05-01
Title
Formality < 1.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Parameter
Slug
formality
Published
2025-07-16
Title
Formality < 1.5.10 - Unauthenticated Local File Inclusion