Deliciousdays Cforms vulnerabilities

• deliciousdays cformsii Unrestricted file upload vulnerability in lib_nonajax.php in the CformsII plugin 14.7 and earlier... CVE-2014-9473 Public exploit EPSS 13.8% 7.5 HighJanuary 8, 2015
• deliciousdays cforms Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in... CVE-2010-3977 Public exploit 4.3 MediumNovember 3, 2010