TI-2024-25982 CVE-2024-38748 · GHSA-76x8-w2v7-4h6v
WordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerability
Priority MEDIUM 49
Access Control vulnerability in TheInnovs EleForms allows .
cscode
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
cscode records in CISA KEVNo cscode vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Eleforms · all components
TI-2024-01938 CVE-2024-2082 · GHSA-fc5r-838m-fqp2
Cross-site scripting in cscode EleForms – All In One Form Integration including DB for…
Priority LOW 32
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 2.9.9.7 due to insuffic…
TI-2024-06144 CVE-2024-6626 · GHSA-vcxp-gwc2-pxw9
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization
Priority LOW 30
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all versions up to, and in…
TI-2024-01900 CVE-2024-2043 · GHSA-7qh7-6q7x-98p6
Missing authorization in cscode EleForms – All In One Form Integration including DB for…
Priority LOW 25
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when downloading form submissions in all versions…
TI-2024-06146 CVE-2024-6628 · GHSA-594g-qx5x-32v8
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery
Priority LOW 20
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.9.9.