Read the docs

Web-Settler

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Web-Settler records in CISA KEV

No Web-Settler vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Form Builder 3 records MEDIUM Layer Slider 3 records LOW Custom Login Page Styler 1 record LOW Image Social Feed 1 record LOW Social Feed 1 record LOW Social Feed | All Social Media In One Place 1 record LOW Testimonial Slider 1 record LOW

Records

3 records in Form Builder · all components

TI-2023-09596 CVE-2023-23796 · GHSA-978x-c366-r634

WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection

Priority MEDIUM 50

Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00596 Published 2023-11-07 No fix listed CWE-1236
TI-2021-06800 CVE-2021-24513 · GHSA-4c89-7wj7-fm5r

Form Builder < 1.9.8.4 - Authenticated Stored Cross-Site Scripting

Priority LOW 25

The Form Builder | Create Responsive Contact Forms WordPress plugin before 1.9.8.4 does not sanitise or escape its Form Title, allowing high privilege users such as admin to set Cross-Site Scripting payload in them, even…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-06 Fixed in 1.9.8.4 CWE-79
Open these records in search →