cformsII

Уязвимости

• CVE-2017-18570без авторизации

  The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.

  Критич. 9.8

• CVE-2015-9333без авторизации

  The cforms2 plugin before 14.6.10 for WordPress has SQL injection.

  Критич. 9.8

• CVE-2023-25449без авторизации · нужен клик≤ 15.0.4

  WordPress CformsII Plugin <=15.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2019-15238без авторизации · нужен клик

  The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.

  Высокий 8.8

• CVE-2014-9473

  Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to e

  Высокий 7.5

• CVE-2026-39435без авторизации · нужен клик≤ 15.1.3

  WordPress CformsII plugin <= 15.1.3 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-39436без авторизации · нужен клик≤ 15.1.3

  WordPress CformsII plugin <= 15.1.3 - Cross Site Request Forgery (CSRF) vulnerability

  Высокий 7.1

• CVE-2024-22149без авторизации · нужен клик≤ 15.0.5

  WordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2014-10393без авторизации · нужен клик

  The cforms2 plugin before 10.5 for WordPress has XSS.

  Средний 6.1

• CVE-2014-10392без авторизации · нужен клик

  The cforms2 plugin before 10.2 for WordPress has XSS.

  Средний 6.1

• CVE-2017-18559без авторизации · нужен клик

  The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues.

  Средний 6.1

• CVE-2014-10377без авторизации · нужен клик

  The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php.

  Средний 6.1

• CVE-2023-52203высокие права≤ 15.0.5

  WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)

  Средний 4.8