Skip to contentThemekraft Post Form vulnerabilities
- svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft buddyforms +1 moreFrontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' ShortcodeCVE-2024-120386.4 Medium
- svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc)Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-120376.4 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft buddyforms, post form registration form profile form for user profiles and content forms +2 morePost Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege EscalationCVE-2024-82468.8 High
- themekraft buddyforms, svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft post form registration form profile form for user profiles and content forms +2 moreBuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient RandomnessCVE-2024-51496.5 Medium
- svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft buddyforms +1 morePost Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing AuthorizationCVE-2024-11584.3 Medium
- svenl7 post form, svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc) +1 morePost Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media UploadCVE-2024-11697.5 High
- svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft post form +1 morePost Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media DeletionCVE-2024-11708.2 High
- themekraft post formWordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-259816.5 Medium
- themekraft post form – registration form – profile form for user profiles and content forms for user submissions, post form registration form profile form for user profiles and content forms +1 moreWordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)CVE-2022-389714.7 Medium