Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: OptinlyHQ Component: Gozen Forms Clear all filters
TI-2025-06160 CVE-2025-6782 · GHSA-m484-639j-m4rh

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()

Priority LOW 39

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supp…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00396 Published 2025-07-04 No fix listed CWE-89
TI-2025-06161 CVE-2025-6783 · GHSA-77f7-94f9-qhqq

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()

Priority LOW 39

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied par…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2025-07-04 No fix listed CWE-89