Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: aman086 Component: Views For Wpforms Clear all filters
TI-2024-00340 CVE-2024-0373 · GHSA-46hv-9rq5-9v3w

Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via save_view

Priority LOW 20

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00232 Published 2024-02-05 No fix listed CWE-284
TI-2024-00338 CVE-2024-0371 · GHSA-vwj5-26vq-wvx2

Views for WPForms <= 3.2.2 - Missing Authorization via create_view

Priority LOW 20

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'create_view' function in all…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00424 Published 2024-02-05 No fix listed CWE-284
TI-2024-00337 CVE-2024-0370 · GHSA-rwv8-w229-vr4v

Views for WPForms <= 3.2.2 - Missing Authorization via save_view

Priority MEDIUM 53

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_view' function in all ve…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00424 Published 2024-02-05 No fix listed CWE-284
TI-2024-00341 CVE-2024-0374 · GHSA-wp72-v8x4-g8h9

Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via create_view

Priority LOW 20

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00232 Published 2024-02-05 No fix listed CWE-284
TI-2024-00339 CVE-2024-0372 · GHSA-5cmr-7rv7-358p

Views for WPForms <= 3.2.2 - Missing Authorization via get_form_fields

Priority LOW 20

The Views for WPForms – Display & Edit WPForms Entries on your site frontend plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_form_fields' function in all ve…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00356 Published 2024-02-05 No fix listed CWE-862