BuddyForms

Уязвимости

• CVE-2018-21003без авторизации

  The buddyforms plugin before 2.2.8 for WordPress has SQL injection.

  Критич. 9.8

• CVE-2025-32151нужен вход≤ 2.9.0

  WordPress BuddyForms Plugin <= 2.9.0 - Local File Inclusion vulnerability

  Высокий 8.8

• CVE-2024-8246участник+≤ 2.8.11

  Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Priv

  Высокий 8.8

• CVE-2024-1170без авторизации≤ 2.8.7

  Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthent

  Высокий 8.2

• CVE-2024-32830без авторизации≤ 2.8.8

  WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability

  Высокий 7.5

• CVE-2024-1169без авторизации≤ 2.8.7

  Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthent

  Высокий 7.5

• CVE-2026-81785без авторизации≤ 2.9.0

  WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2024-12037участник+≤ 2.8.13

  Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2024-30198без авторизации · нужен клик≤ 2.8.5

  WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2022-38971без авторизации · нужен клик≤ 2.7.5

  WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2024-12038участник+≤ 2.8.15

  Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode

  Средний 5.4

• CVE-2023-25981участник+≤ 2.8.1

  WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2024-47377высокие права≤ 2.8.12

  WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2025-62973без авторизации≤ 2.9.0

  WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-5149без авторизации≤ 2.8.9

  BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness

  Средний 5.3

• CVE-2024-1158подписчик+≤ 2.8.7

  Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization

  Средний 4.3