Medium
CVE-2026-81785
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 25
Reset filters
Medium
CVE-2025-62973
BuddyForms <= 2.9.0 - Missing Authorization
High
CVE-2025-32151
BuddyForms <= 2.8.17 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-12038
Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode
Medium
CVE-2024-12037
Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47377
BuddyForms <= 2.8.12 - Authenticated (Editor+) Stored Cross-Site Scripting
High
CVE-2024-8246
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2024-5149
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
Critical
CVE-2024-32830
BuddyForms <= 2.8.8 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
Medium
CVE-2024-30198
BuddyForms <= 2.8.5 - Reflected Cross-Site Scripting via page
High
CVE-2024-1169
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload
High
CVE-2024-1170
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Deletion
Medium
CVE-2024-1158
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-25981
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-26326
BuddyForms <= 2.7.7 - PHAR Deserialization
Medium
CVE-2022-38971
BuddyForms <= 2.7.2 - Authenticated (Contributor+) Stored Stored Cross-Site Scripting
Medium
50c8a20a-66b4-445e-9167-e6fc0e6a1000
BuddyForms Moderation <= 1.4.16 - Authenticated Stored Cross-Site Scripting
Medium
cd6f4f0d-0e70-459a-8f09-64d1f6f8bb7e
BuddyForms ACF <= 1.3.8 - Authenticated (Contributor+) Cross-Site Scripting
Medium
ba5d1bd4-da0d-43f4-b28f-4a4a2702b3b0
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.6.9 - Cross-Site Scripting
Medium
dbbd9eda-756b-4fa7-b7b6-d91181cc80d6
BuddyForms Members <= 1.4.21 - Cross-Site Scripting
Medium
0a49d74a-01a6-4bd9-bc93-0006f9fe9503
BuddyForms Hook Fields <= 1.3.8 - Cross-Site Scripting
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.