Skip to content
Themekraft Post Form vulnerabilities
-
svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft buddyforms, post form registration form profile form for user profiles and content forms +2 more
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation
CVE-2024-8246
8.8 High
-
themekraft buddyforms, svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft post form registration form profile form for user profiles and content forms +2 more
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
CVE-2024-5149
6.5 Medium
-
svenl7 post form, svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc) +1 more
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload
CVE-2024-1169
7.5 High
-
svenl77 post form – registration form – profile form for user profiles – frontend content forms for user submissions (ugc), themekraft post form +1 more
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Deletion
CVE-2024-1170
8.2 High
-
themekraft post form
WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-25981
6.5 Medium
-
themekraft post form – registration form – profile form for user profiles and content forms for user submissions, post form registration form profile form for user profiles and content forms +1 more
WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-38971
4.7 Medium