Smart Forms
RedNao · 8 CVEs
CVE-2023-49856
HIGH
WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability
Dec 9, 2024
CVE-2024-33593
MEDIUM
WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability
Apr 29, 2024
CVE-2024-1905
MEDIUM
Smart Forms < 2.6.96 - Admin+ Stored XSS
Apr 29, 2024
CVE-2024-1307
MEDIUM
Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
Apr 15, 2024
CVE-2024-1306
MEDIUM
Smart Forms < 2.6.94 - Edit Entries via CSRF
Apr 15, 2024
CVE-2023-7203
MEDIUM
Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion
Feb 27, 2024
CVE-2022-0163
MEDIUM
Smart Forms < 2.6.71 - Subscriber+ Form Data Download
Mar 7, 2022
CVE-2019-5924
HIGH
Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the…
Mar 12, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2023-49856 | WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability | HIGH | 0.54% | Dec 9, 2024 |
| CVE-2024-33593 | WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability | MEDIUM | 0.34% | Apr 29, 2024 |
| CVE-2024-1905 | Smart Forms < 2.6.96 - Admin+ Stored XSS | MEDIUM | 0.47% | Apr 29, 2024 |
| CVE-2024-1307 | Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control | MEDIUM | 0.53% | Apr 15, 2024 |
| CVE-2024-1306 | Smart Forms < 2.6.94 - Edit Entries via CSRF | MEDIUM | 0.23% | Apr 15, 2024 |
| CVE-2023-7203 | Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion | MEDIUM | 0.22% | Feb 27, 2024 |
| CVE-2022-0163 | Smart Forms < 2.6.71 - Subscriber+ Form Data Download | MEDIUM | 0.99% | Mar 7, 2022 |
| CVE-2019-5924 | Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a… | HIGH | 1.16% | Mar 12, 2019 |
Showing 1 to 8 of 8 CVEs