vfbpro records
6 published records for vendor vfbpro.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-306 Missing Authentication for Critical Function1
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2022-0142No exploit | Visual Form Builder < 3.0.6 - CSV Injectionvfbpro · visual form builder · CWE-1236 | Critical9.8 | — | 2.9% | Apr 12, 2022 |
32Monitor | CVE-2022-0141No exploit | Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRFvfbpro · visual form builder · CWE-352 | High8.1 | — | 0.5% | Apr 12, 2022 |
24Monitor | CVE-2023-47518No exploit | WordPress Restrict Categories Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)vfbpro · restrict categories · CWE-79 | Medium6.1 | — | 0.4% | Nov 14, 2023 |
22Monitor | CVE-2022-0140Proof of concept | Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosurevfbpro · visual form builder · CWE-306 | Medium5.3 | — | 3.8% | Apr 12, 2022 |
19Monitor | CVE-2021-24514No exploit | Visual Form Builder < 3.0.4 - Admin+ Stored Cross-Site Scriptingvfbpro · visual form builder · CWE-79 | Medium4.8 | — | 0.6% | Oct 25, 2021 |
19Monitor | CVE-2022-1046No exploit | Visual Form Builder < 3.0.7 - Admin+ Stored Cross-Site Scriptingvfbpro · visual form builder · CWE-79 | Medium4.8 | — | 0.6% | May 2, 2022 |
- CVE-2022-014240Plan
Visual Form Builder < 3.0.6 - CSV Injection
CriticalCVSS 9.8No exploitEPSS 3%vfbpro · visual form builderApr 12, 2022
- CVE-2022-014132Monitor
Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRF
HighCVSS 8.1No exploitEPSS 0%vfbpro · visual form builderApr 12, 2022
- CVE-2023-4751824Monitor
WordPress Restrict Categories Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%vfbpro · restrict categoriesNov 14, 2023
- CVE-2022-014022Monitor
Visual Form Builder < 3.0.6 - Unauthenticated Information Disclosure
MediumCVSS 5.3Proof of conceptEPSS 4%vfbpro · visual form builderApr 12, 2022
- CVE-2021-2451419Monitor
Visual Form Builder < 3.0.4 - Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 1%vfbpro · visual form builderOct 25, 2021
- CVE-2022-104619Monitor
Visual Form Builder < 3.0.7 - Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 1%vfbpro · visual form builderMay 2, 2022