CVE Browser

CVE-2024-10646 HIGH

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject

CVSS 7.2 EPSS 0.36% Dec 14, 2024
CVE-2024-9651 MEDIUM

Contact Form Plugin by Fluent Forms < 5.2.1 - Admin+ Stored XSS

CVSS 6.1 EPSS 0.37% Dec 9, 2024
CVE-2024-9528 MEDIUM

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting

CVSS 4.9 EPSS 0.40% Oct 5, 2024
CVE-2024-5053 MEDIUM

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchi…

CVSS 4.3 EPSS 0.40% Sep 1, 2024
CVE-2024-6703 MEDIUM

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via W…

CVSS 5.4 EPSS 0.32% Jul 27, 2024
CVE-2024-6518 MEDIUM

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

CVSS 4.8 EPSS 0.32% Jul 27, 2024
CVE-2024-6520 MEDIUM

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

CVSS 4.8 EPSS 0.32% Jul 27, 2024
CVE-2024-6521 MEDIUM

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

CVSS 4.8 EPSS 0.32% Jul 27, 2024
CVE-2024-4157 HIGH

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues

CVSS 8.8 EPSS 0.70% May 22, 2024
CVE-2024-4709 MEDIUM

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting

CVSS 6.4 EPSS 0.39% May 18, 2024
CVE-2024-2772 MEDIUM

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting

CVSS 6.4 EPSS 0.26% May 18, 2024
CVE-2024-2782 HIGH

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation

CVSS 7.5 EPSS 1.23% May 18, 2024
CVE-2024-2771 CRITICAL

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privileg…

CVSS 9.8 EPSS 2.33% May 18, 2024
CVE-2023-6957 MEDIUM

Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

CVSS 5.4 EPSS 0.38% Mar 13, 2024
CVE-2024-0618 MEDIUM

Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title

CVSS 4.8 EPSS 0.54% Jan 27, 2024
CVE-2023-24410 CRITICAL

WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection

CVSS 9.8 EPSS 0.74% Oct 31, 2023
CVE-2023-0546 MEDIUM

FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field

CVSS 5.4 EPSS 0.48% Apr 10, 2023
CVE-2022-3463 CRITICAL

FluentForm < 4.3.13 - CSV Injection

CVSS 9.8 EPSS 1.33% Nov 7, 2022
CVE-2021-34620 HIGH

CSRF in WP Fluent Forms < 3.6.67 allows stored XSS and Privilege Escalation

CVSS 8.8 EPSS 2.63% Jul 7, 2021

Showing 1 to 19 CVEs · page 1