CVE ID	Description	Severity	EPSS	Published
CVE-2026-81785	WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability	MEDIUM	0.33%	Sep 10, 2026
CVE-2025-62973	WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability	MEDIUM	0.23%	Oct 27, 2025
CVE-2025-32151	WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability	HIGH	0.97%	Apr 4, 2025
CVE-2024-12038	Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode	MEDIUM	0.25%	Feb 22, 2025
CVE-2024-47377	WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability	MEDIUM	0.27%	Oct 5, 2024
CVE-2024-8246	Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Pri…	HIGH	0.43%	Sep 14, 2024
CVE-2024-5149	BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness	MEDIUM	0.39%	Jun 5, 2024
CVE-2024-32830	WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability	HIGH	0.58%	May 17, 2024
CVE-2024-30198	WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability	MEDIUM	0.31%	Mar 27, 2024
CVE-2024-1158	Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization	MEDIUM	0.50%	Mar 13, 2024
CVE-2023-26326	The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. An unauthenticated attacker cou…	CRITICAL	3.82%	Feb 23, 2023
CVE-2018-21003	The buddyforms plugin before 2.2.8 for WordPress has SQL injection.	CRITICAL	1.83%	Aug 27, 2019

Rows per page

Showing 1 to 11 of 11 CVEs