Skip to content

Themekraft vulnerabilities

Products

Newest

themekraft buddyforms BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion CVE-2026-107658 5.4 MediumNovember 6, 2026
themekraft buddyforms BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter CVE-2026-107622 9.8 CriticalNovember 6, 2026
themekraft buddyforms BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion CVE-2026-118437 3.7 LowOctober 31, 2026
themekraft buddyforms BuddyForms < 2.10.1 - Subscriber+ Arbitrary Post Modification CVE-2026-118101 5.3 MediumOctober 30, 2026
themekraft buddyforms BuddyForms < 2.10.3 - Unauthenticated Form Configuration Disclosure CVE-2026-118100 5.3 MediumOctober 30, 2026
themekraft buddyforms WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability CVE-2026-81785 6.5 MediumSeptember 10, 2026
themekraft buddyforms WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability CVE-2025-62973 5.3 MediumOctober 27, 2025
themekraft buddyforms WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability CVE-2025-32151 7.5 HighApril 4, 2025
svenl77 buddypress woocommerce my account integration. create woocommerce member pages, themekraft buddypress woocommerce my account integration +1 more BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update CVE-2025-1780 4.3 MediumMarch 1, 2025
svenl77 buddypress woocommerce my account integration. create woocommerce member pages, themekraft buddypress woocommerce my account integration +1 more BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update CVE-2024-13358 4.3 MediumMarch 1, 2025
svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft buddyforms +1 more Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode CVE-2024-12038 6.4 MediumFebruary 22, 2025
svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc) Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12037 6.4 MediumJanuary 31, 2025
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
themekraft buddyforms WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability CVE-2024-47377 5.9 MediumOctober 5, 2024
svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft buddyforms, post form registration form profile form for user profiles and content forms +2 more Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation CVE-2024-8246 8.8 HighSeptember 14, 2024
themekraft woobuddy, buddypress woocommerce my account integration. create woocommerce member pages +1 more WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability CVE-2024-35726 4.3 MediumJune 10, 2024
themekraft buddyforms, svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft post form registration form profile form for user profiles and content forms +2 more BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness CVE-2024-5149 6.5 MediumJune 5, 2024
themekraft buddyforms WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability CVE-2024-32830 Public exploit 8.6 HighMay 17, 2024
themekraft woobuddy, buddypress woocommerce my account integration +1 more WordPress WooBuddy plugin <= 3.4.20 - PHP Object Injection vulnerability CVE-2024-32603 8.5 HighApril 18, 2024
themekraft buddyforms WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-30198 5.8 MediumMarch 27, 2024
svenl77 buddypress woocommerce my account integration. create woocommerce member pages, themekraft buddypress woocommerce my account integration +1 more BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request CVE-2024-2025 8.8 HighMarch 23, 2024
svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft buddyforms +1 more Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization CVE-2024-1158 4.3 MediumMarch 13, 2024
svenl7 post form, svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc) +1 more Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload CVE-2024-1169 7.5 HighMarch 7, 2024
svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft post form +1 more Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Deletion CVE-2024-1170 8.2 HighMarch 7, 2024
themekraft tk google fonts gdpr compliant WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-5823 4.3 MediumNovember 6, 2023
themekraft post form WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25981 6.5 MediumAugust 25, 2023
themekraft post form – registration form – profile form for user profiles and content forms for user submissions, post form registration form profile form for user profiles and content forms +1 more WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS) CVE-2022-38971 4.7 MediumMarch 16, 2023
themekraft buddyforms The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated... CVE-2023-26326 Public exploit 9.8 CriticalFebruary 23, 2023
themekraft buddyforms The buddyforms plugin before 2.2.8 for WordPress has SQL injection. CVE-2018-21003 9.8 CriticalAugust 27, 2019