Vulnerabilities

TI-2025-31441 CVE-2025-49393 · GHSA-68wf-63x8-j6c7

WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability

MEDIUM 50

Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through <= 2.3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2025-11-06 No fix listed CWE-502

TI-2025-31439 CVE-2025-49391 · GHSA-9w8x-fxqh-fhv5

WordPress Sign-up Sheets Plugin <= 2.3.3 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Cross Site Request Forgery.This issue affects Sign-up Sheets: from n/a through <= 2.3.3.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00132 Published 2025-08-20 No fix listed CWE-352

TI-2025-19867 CVE-2025-26996 · GHSA-88m8-cgv4-46m9

WordPress Sign-up Sheets plugin <= 2.3.0.1 - Shortcode Injection vulnerability

LOW 35

Improper Control of Generation of Code ('Code Injection') vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Code Injection.This issue affects Sign-up Sheets: from n/a through <= 2.3.0.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00324 Published 2025-04-15 No fix listed CWE-94

TI-2024-26578 CVE-2024-39654 · GHSA-v8pp-rqxp-rhjr

WordPress Sign-up Sheets plugin <= 2.2.12 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through <= 2.2.12.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00359 Published 2024-11-01 No fix listed CWE-862

TI-2024-05578 CVE-2024-6020 · GHSA-wwjw-jqq2-7xjv

Sign-up Sheets < 2.2.13 - Reflected XSS

MEDIUM 60

The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00391 Published 2024-09-04 Fixed in 2.2.13 CWE-79

TI-2024-20679 CVE-2024-31303 · GHSA-hw4x-h5f9-fmf2

WordPress Sign-up Sheets plugin <= 2.2.11.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through <= 2.2.11.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00202 Published 2024-04-12 No fix listed CWE-352

TI-2023-20331 CVE-2023-39165 · GHSA-mffm-5jwp-6hjq

WordPress Sign-up Sheets Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin <= 2.2.8 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2023-10-03 No fix listed CWE-352

TI-2021-06731 CVE-2021-24441 · GHSA-c5xg-pgx2-gmrf

Sign-up Sheets < 1.0.14 - Authenticated CSV Injection

LOW 37

The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01308 Published 2021-07-12 Fixed in 1.0.14 CWE-1236

TI-2021-06730 CVE-2021-24440 · GHSA-q7cx-mv5x-6h53

Sign-up Sheets < 1.0.14 - Authenticated Stored Cross-Site Scripting (XSS)

LOW 23

The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-07-12 Fixed in 1.0.14 CWE-79

Vulnerabilities

Filters