Weformspro Weforms vulnerabilities

• boldgrid weforms WordPress weForms plugin <= 1.6.18 - Broken Access Control vulnerability CVE-2023-51524 4.3 MediumJune 12, 2024
• boldgrid weforms WordPress weForms plugin <= 1.6.20 - Broken Access Control vulnerability CVE-2024-30512 3.7 LowJune 9, 2024
• boldgrid weforms WordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerability CVE-2024-32512 5.3 MediumMay 17, 2024
• weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 more weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer CVE-2024-0386 7.2 HighMarch 12, 2024
• boldgrid weforms – easy drag & drop contact form builder for wordpress, weforms – easy drag & drop contact form builder for wordpress, weformspro weforms +2 more WordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50896 5.9 MediumDecember 29, 2023
• weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 more weForms < 1.6.14 - Admin+ Stored Cross-Site Scripting CVE-2022-2395 4.8 MediumAugust 8, 2022
• weformspro weforms WeForms Wordpress Plugin 1.4.7 allows CSV injection via a form's entry. CVE-2020-22276 9.8 CriticalNovember 4, 2020