cformsII

Güvenlik açıkları

• CVE-2017-18570kimlik doğrulamasız

  The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.

  Kritik 9.8

• CVE-2015-9333kimlik doğrulamasız

  The cforms2 plugin before 14.6.10 for WordPress has SQL injection.

  Kritik 9.8

• CVE-2023-25449kimlik doğrulamasız · tıklama gerekir≤ 15.0.4

  WordPress CformsII Plugin <=15.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2019-15238kimlik doğrulamasız · tıklama gerekir

  The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.

  Yüksek 8.8

• CVE-2014-9473

  Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier for WordPress allows remote attackers to e

  Yüksek 7.5

• CVE-2026-39435kimlik doğrulamasız · tıklama gerekir≤ 15.1.3

  WordPress CformsII plugin <= 15.1.3 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-39436kimlik doğrulamasız · tıklama gerekir≤ 15.1.3

  WordPress CformsII plugin <= 15.1.3 - Cross Site Request Forgery (CSRF) vulnerability

  Yüksek 7.1

• CVE-2024-22149kimlik doğrulamasız · tıklama gerekir≤ 15.0.5

  WordPress cformsII plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2014-10393kimlik doğrulamasız · tıklama gerekir

  The cforms2 plugin before 10.5 for WordPress has XSS.

  Orta 6.1

• CVE-2014-10392kimlik doğrulamasız · tıklama gerekir

  The cforms2 plugin before 10.2 for WordPress has XSS.

  Orta 6.1

• CVE-2017-18559kimlik doğrulamasız · tıklama gerekir

  The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues.

  Orta 6.1

• CVE-2014-10377kimlik doğrulamasız · tıklama gerekir

  The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php.

  Orta 6.1

• CVE-2023-52203yüksek yetki≤ 15.0.5

  WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)

  Orta 4.8