Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

Уязвимости

• CVE-2025-49291без авторизации · нужен клик≤ 5.3.58

  WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability

  Высокий 8.8

• CVE-2026-95529без авторизации · нужен клик≤ 5.5.1.1

  WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-25368нужен вход≤ 5.4.4.1

  WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2026-3986участник+≤ 5.4.5.0

  Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings

  Средний 6.4

• CVE-2026-100179без авторизации · нужен клик≤ 5.5.1.3

  Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()

  Средний 6.1

• CVE-2024-29759без авторизации · нужен клик≤ 1.2.54

  WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2024-2020без авторизации≤ 5.1.56

  Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting

  Средний 6.1

• CVE-2023-51517нужен вход≤ 1.2.28

  WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection

  Средний 5.4

• CVE-2020-7228нужен вход

  The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms.

  Средний 5.4

• CVE-2024-0963участник+≤ 1.2.52

  Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-12601без авторизации≤ 5.2.63

  Calculated Fields Form <= 5.2.63 - Denial of Service

  Средний 5.3

• CVE-2023-6446админ≤ 1.2.40

  Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2026-100184без авторизации · нужен клик≤ 5.5.1.3

  Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value

  Средний 4.7

• CVE-2024-9940без авторизации≤ 5.2.45

  Calculated Fields Form <= 5.2.45 - HTML Injection

  Средний 4.3

• CVE-2023-26523нужен вход≤ 1.1.120

  WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability

  Средний 4.3