WordPress Plugin Vulnerabilities | Page 38 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2026-03-12

Title

Formidable Forms < 6.29 - Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse

Slug

formidable-registration

Published

2024-02-19

Title

Formidable Registration < 2.12 - Contributor+ Arbitrary User Password Reset To Account Takeover

Slug

Published

2017-12-14

Title

Multiple Mediaburst/Clockwork Plugins - Cross-Site Scripting (XSS)

Slug

formidablepro-2-pdf

Published

2023-03-22

Title

Formidable PRO2PDF < 3.11 - Subscriber+ SQLi

Slug

formilla-live-chat

Published

2023-04-21

Title

Live Chat by Formilla < 1.3.1 - Admin+ Stored XSS

Slug

Published

2019-02-06

Title

Forminator < 1.6 - Authenticated Multiple Vulnerabilities

Slug

Published

2020-09-16

Title

Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)

Slug

Published

2021-03-01

Title

Multiple Plugins - CSRF Nonce Bypasses

Slug

Published

2021-10-20

Title

Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting

Slug

Published

2021-07-14

Title

Forminator < 1.14.12 - Unauthenticated Stored XSS

Slug

Published

2023-06-12

Title

Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote

Slug

Published

2023-07-10

Title

Forminator < 1.24.4 - Reflected XSS

Slug

Published

2023-08-04

Title

Forminator < 1.25.0 - Unauthenticated Arbitrary File Upload

Slug

Published

2023-10-27

Title

Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting

Slug

Published

2023-11-14

Title

Forminator < 1.28.0 - Admin+ Arbitrary File Upload

Slug

Published

2024-03-29

Title

Forminator < 1.29.1 - Unauthenticated Stored XSS

Slug

Published

2024-03-25

Title

Forminator < 1.29.1 - Reflected Cross-Site Scripting

Slug

Published

2024-04-08

Title

Forminator < 1.29.3 - Contributor+ Stored Cross-Site Scripting via forminator_form Shortcode

Slug

Published

2024-04-18

Title

Forminator < 1.29.0 - Unauthenticated Arbitrary File Upload

Slug

Published

2024-04-18

Title

Forminator < 1.15.4 - Reflected Cross-Site Scripting

Slug

Published

2024-04-18

Title

Forminator < 1.29.3 - Admin+ SQL Injection

Slug

Published

2024-08-01

Title

Forminator < 1.29.2 - HubSpot Developer API Key Sensitive Information Exposure

Slug

Published

2024-09-09

Title

Forminator Forms – Contact Form, Payment Form & Custom Form Builder < 1.34.1 - Reflected Cross-Site Scripting

Slug

Published

2024-10-16

Title

Forminator Forms < 1.36.0 - Draft Quiz Creation via CSRF

Slug

Published

2024-10-16

Title

Forminator Forms < 1.36.0 - Draft Custom Form Creation via CSRF