İçeriğe atla
Noroxi

WPForms kayıtları

wpforms üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%50
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 22
  3. 23
  4. 24
  5. 25
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

16 kayıt
  • CVE-2022-3574
    39İzleyin

    WPForms Pro < 1.7.7 - CSV Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    wpforms · wpforms pro14 Kas 2022

  • CVE-2024-56276
    35İzleyin

    WordPress WPForms Lite plugin <= 1.9.2.2 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    wpforms · wpforms7 Oca 2025

  • CVE-2023-52209
    32İzleyin

    WordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %0

    wpforms, llc. · wpforms user registration1 Ağu 2024

  • CVE-2024-11205
    26İzleyin

    WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation

    OrtaCVSS 6,5İstismar yokEPSS %1

    wpforms · wpforms10 Ara 2024

  • CVE-2019-25145
    24İzleyin

    Contact Form & SMTP Plugin by PirateForms <= 2.5.1 - Unauthenticated HTML injection

    OrtaCVSS 6,1İstismar yokEPSS %1

    wpforms · contact form6 Haz 2023

  • CVE-2023-7063
    24İzleyin

    The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all versions up to, and

    OrtaCVSS 6,1İstismar yokEPSS %1

    wpforms · wpforms20 Oca 2024

  • CVE-2023-30500
    24İzleyin

    WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpforms · contact form22 Haz 2023

  • CVE-2024-11272
    24İzleyin

    Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpforms · pirate forms25 Mar 2025

  • CVE-2024-11273
    24İzleyin

    Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS

    OrtaCVSS 6,1İstismar yokEPSS %0

    wpforms · contact form25 Mar 2025

  • CVE-2020-10385
    22İzleyin

    A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.

    OrtaCVSS 5,4Kavram kanıtıEPSS %4

    wpforms · contact form24 Mar 2020

  • CVE-2023-3213
    21İzleyin

    WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page

    OrtaCVSS 5,3İstismar yokEPSS %0

    wpforms · wp mail smtp3 Eki 2023

  • CVE-2024-13403
    21İzleyin

    WPForms Lite <= 1.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via fieldHTML Parameter

    OrtaCVSS 5,4İstismar yokEPSS %0

    wpforms · wpforms4 Şub 2025

  • CVE-2020-36919
    20İzleyin

    WPForms 1.7.8 - Cross-Site Scripting (XSS)

    OrtaCVSS 5,1İstismar yokEPSS %0

    wpforms · wpforms13 Oca 2026

  • CVE-2024-11223
    18İzleyin

    WPForms < 1.9.2.3 - Admin+ Stored XSS

    OrtaCVSS 4,7İstismar yokEPSS %1

    wpforms · wpforms26 Ara 2024

  • CVE-2024-10593
    17İzleyin

    WPForms – Easy Form Builder for WordPress <= 1.9.1.6 - Cross-Site Request Forgery (CSRF) to Plugin's Log Deletion

    OrtaCVSS 4,3İstismar yokEPSS %0

    wpforms · wpforms12 Kas 2024

  • CVE-2024-7056
    14İzleyin

    WPForms < 1.9.1.6 - Admin+ Stored XSS

    DüşükCVSS 3,5İstismar yokEPSS %0

    wpforms · wpforms25 Kas 2024