Vulnerabilities

TI-2024-06146 CVE-2024-6628 · GHSA-594g-qx5x-32v8

EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery

LOW 20

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.9.9.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00231 Published 2024-11-16 No fix listed CWE-352

TI-2024-06144 CVE-2024-6626 · GHSA-vcxp-gwc2-pxw9

EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization

LOW 30

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all versions up to, and in…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00433 Published 2024-11-06 No fix listed CWE-862

TI-2024-25982 CVE-2024-38748 · GHSA-76x8-w2v7-4h6v

WordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerability

MEDIUM 49

Access Control vulnerability in TheInnovs EleForms allows .

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00527 Published 2024-11-01 No fix listed CWE-862

TI-2024-01938 CVE-2024-2082 · GHSA-fc5r-838m-fqp2

Cross-site scripting in cscode EleForms – All In One Form Integration including DB for…

LOW 32

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 2.9.9.7 due to insuffic…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00374 Published 2024-05-02 No fix listed CWE-79

TI-2024-01900 CVE-2024-2043 · GHSA-7qh7-6q7x-98p6

Missing authorization in cscode EleForms – All In One Form Integration including DB for…

LOW 25

The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when downloading form submissions in all versions…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00532 Published 2024-05-02 No fix listed CWE-862