Browse CVEs

HIGH 8.8 CVE-2023-25449 Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions. Cformsii 15.0.5+ Fix from $1,9502023-06-15 MEDIUM 6.1 CVE-2014-10393 The cforms2 plugin before 10.5 for WordPress has XSS. Cformsii 10.5+ Fix from $1,6002019-08-22 MEDIUM 6.1 CVE-2014-10392 The cforms2 plugin before 10.2 for WordPress has XSS. Cformsii 10.2+ Fix from $1,6002019-08-22 CRITICAL 9.8 CVE-2017-18570 The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries. Cformsii 14.13+ Fix from $2,3002019-08-22 CRITICAL 9.8 CVE-2015-9333 The cforms2 plugin before 14.6.10 for WordPress has SQL injection. Cformsii 14.6.10+ Fix from $2,3002019-08-22 MEDIUM 6.1 CVE-2017-18559 The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues. Cformsii 14.13.3+ Fix from $1,6002019-08-21 MEDIUM 6.1 CVE-2014-10377 The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php. Cformsii 13.2+ Fix from $1,6002019-08-21 HIGH 8.8 CVE-2019-15238 The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field. Cformsii 15.0.2+ Fix from $1,9502019-08-20