Boldgrid Weforms – Easy Drag & Drop Contact Form Builder For Wordpress vulnerabilities
- boldgrid weforms – easy drag & drop contact form builder for wordpressweForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter5.4 Medium
- boldgrid weforms – easy drag & drop contact form builder for wordpressweForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API6.4 Medium
- weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 moreweForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer7.2 High
- boldgrid weforms – easy drag & drop contact form builder for wordpress, weforms – easy drag & drop contact form builder for wordpress, weformspro weforms +2 moreWordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 moreweForms < 1.6.14 - Admin+ Stored Cross-Site Scripting4.8 Medium