WordPress Plugin Vulnerabilities

Formbuilder < 0.91 - XSS

Description

The FormBuilder WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
formbuilder
Fixed in 0.91

References

CVE
CVE-2012-6715

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
68b140ef-8bd0-4793-9df7-e3a9a96a1690

Timeline

Publicly Published
2012-05-28 (about 13 years ago)
Added
2019-08-26 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2022-09-15
Title
TaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
Published
2024-04-22
Title
wpDiscuz < 7.6.16 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text
Published
2025-04-10
Title
Make Email Customizer for WooCommerce <= 1.0.6 - Reflected Cross-Site Scripting
Published
2024-11-19
Title
404 Solution < 2.35.20 - Reflected Cross-Site Scripting