WordPress Plugin Vulnerabilities

Pirate Forms < 2.5.2 - HTML Injection & CSRF

Description

The Contact Form & SMTP Plugin for WordPress by PirateForms WordPress plugin was affected by a HTML Injection & CSRF security vulnerability.

Affects Plugins

Plugin icon
pirate-forms
Fixed in 2.5.2

References

CVE
CVE-2019-25145
URL
https://blog.nintechnet.com/html-injection-vulnerability-in-wordpress-pirate-forms-plugin/

Miscellaneous

Original Researcher
Jerome Bruandet (nintechnet.com)
Verified
No
WPVDB ID
96f82050-4b49-40f8-94c5-b24387dd4752

Timeline

Publicly Published
2019-07-27 (about 6 years ago)
Added
2019-07-27 (about 6 years ago)
Last Updated
2023-06-08 (about 2 years ago)

Other

Published
Title
Published
2014-08-01
Title
FoxyPress 0.4.2.5-0.4.2.8 - Multiple Vulnerabilities
Published
2015-09-26
Title
Appointment Booking Calendar < 1.1.8 - Multiple Reflected Cross-Site Scripting (XSS) and SQL Injection
Published
2020-01-17
Title
Marketo Forms and Tracking <= 1.0.2 - CSRF to XSS
Published
2014-08-01
Title
WordPress 3.3.1 - Multiple Vulnerabilities including XSS & Privilege Escalation
Published
2020-03-24
Title
Data Tables Generator By Supsystic < 1.9.92 - CSRF to Stored XSS, Data Table Creations, Settings Modification