Browse CVEs

MEDIUM 6.1 CVE-2024-10646 The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scr… Contact Form 5.2.7+ Fix from $1,6002024-12-14 MEDIUM 6.1 CVE-2024-9651 The Fluent Forms WordPress plugin before 5.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as adm… Contact Form 5.2.1+ Fix from $1,6002024-12-09 MEDIUM 5.4 CVE-2024-6703 The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scr… Contact Form 5.1.20+ Fix from $1,6002024-07-27 HIGH 8.8 CVE-2024-4157 The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to PHP Object Injection … Contact Form 5.1.16+ Fix from $1,9502024-05-22 MEDIUM 6.4 CVE-2024-4709 The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scr… Contact Form 5.1.17+ Fix from $1,6002024-05-18 HIGH 7.5 CVE-2024-2782 The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modifica… Contact Form 5.1.17+ Fix from $1,9502024-05-18 MEDIUM 5.4 CVE-2024-2772 The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scr… Contact Form 5.1.14+ Fix from $1,6002024-05-18 CRITICAL 9.8 CVE-2024-2771 The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation … Contact Form 5.1.17+ Fix from $2,3002024-05-18 MEDIUM 5.4 CVE-2023-6957 The Fluent Forms plugin for WordPress by Fluent Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and in… Contact Form 5.1.10+ Fix from $1,6002024-03-13 CRITICAL 9.8 CVE-2023-24410 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPManageNinja LLC Contact Form P… Contact Form after 4.3.25 Fix from $2,3002023-10-31 MEDIUM 5.4 CVE-2023-0546 The Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in iframes in it's custom HTML fiel… Contact Form 4.3.25+ Fix from $1,6002023-04-10 CRITICAL 9.8 CVE-2022-3463 The Contact Form Plugin WordPress plugin before 4.3.13 does not validate and escape fields when exporting form entries as CSV, leading to a CSV injec… Contact Form 4.3.13+ Fix from $2,3002022-11-07 HIGH 8.8 CVE-2021-34620 The WP Fluent Forms plugin < 3.6.67 for WordPress is vulnerable to Cross-Site Request Forgery leading to stored Cross-Site Scripting and limited Priv… Contact Form 3.6.67+ Fix from $1,9502021-07-07