TI-2024-21683 CVE-2024-32809 · GHSA-9x6v-hgqm-vvp7
WordPress ActiveDEMAND plugin <= 0.2.41 - Arbitrary File Upload vulnerability
Priority MEDIUM 50
Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc.
JumpDEMAND Inc.
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
JumpDEMAND Inc. records in CISA KEVNo JumpDEMAND Inc. vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2025-16390 CVE-2025-22504 · GHSA-xmmp-pp2j-r7jm
WordPress 4ECPS Web Forms Plugin <= 0.2.18 - Arbitrary File Upload vulnerability
Priority MEDIUM 49
Unrestricted Upload of File with Dangerous Type vulnerability in jumpdemand 4ECPS Web Forms 4ecps-webforms allows Upload a Web Shell to a Web Server.This issue affects 4ECPS Web Forms: from n/a through <= 0.2.18.
TI-2022-16647 CVE-2022-36296 · GHSA-mp4f-pwv2-xxc8
WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability
Priority LOW 36
Broken Authentication vulnerability in JumpDEMAND Inc.
TI-2022-21947 CVE-2022-44628 · GHSA-x7j5-2qjw-2rrx
WordPress 4ECPS Web Forms plugin <= 0.2.17 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JumpDEMAND Inc.
TI-2024-23507 CVE-2024-35638 · GHSA-882q-wcp5-p64r
WordPress ActiveDEMAND plugin <= 0.2.43 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in JumpDEMAND Inc.