Medium
CVE-2024-9768
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 53
Reset filters
Medium
CVE-2024-6725
Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-34755
Integration for Contact Form 7 and Salesforce <= <=1.3.9 - Cross-Site Request Forgery
High
CVE-2024-1290
Formidable Registration <= 2.11 - Authenticated (Contributor+) Arbitrary User Password Reset To Account Takeover
Medium
CVE-2024-0660
Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-6830
Formidable Forms <= 6.7 - HTML Injection
Medium
CVE-2023-6842
Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-37982
Integration for Contact Form 7 and Salesforce <= 1.3.3 - Open Redirect
Medium
CVE-2023-2877
Formidable Forms <= 6.3 - Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation
High
CVE-2023-2527
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.2.3 - Authenticated (Admin+) SQL Injection
Critical
CVE-2023-1405
Formidable Forms <= 6.1.2 - Unauthenticated PHP Object Injection
Medium
CVE-2023-0816
Formidable Forms <= 6.0.1 - IP Spoofing via HTTP header
Medium
CVE-2023-25976
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.2.2 - Cross-Site Request Forgery via settings_page function
High
CVE-2023-24419
Formidable Form Builder <= 5.5.6 - Cross-Site Request Forgery
High
CVE-2023-28663
Formidable PRO2PDF <= 3.09 - Authenticated (Admin+) SQL Injection
Medium
f28feb11-7e28-4b97-b529-f6d266c3e534
Formidable Forms <= 5.5.4 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2022-45806
Formidable Form Builder <= 5.5.4 - Cross-Site Request Forgery
Medium
CVE-2021-24608
Formidable Form Builder <= 5.0.06 - Admin+ Stored Cross-Site Scripting
Medium
cc1e9778-2860-4e3c-a2e4-28f10d585fed
CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting
Medium
c4a649b0-d5b2-4e4c-833c-01ecf12611a5
Integration for Contact Form 7 and Zoho CRM, Bigin <= 1.1.7 - Cross-Site Scripting
Critical
CVE-2021-24884
Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2019-15780
Formidable Form Builder <= 4.02 - PHP Object Injection
Medium
CVE-2017-17780
Clockwork SMS Plugins - Multiple Versions - Cross-Site Scripting
Medium
c0e6f20a-3a5c-4782-9852-9891b93d765f
Formidable Form Builder < 2.05.03 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.