Vulnerabilities

TI-2025-20187 CVE-2025-27340 · GHSA-rph7-pv2v-px9j

WordPress F12-Profiler Plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability

LOW 23

Cross-Site Request Forgery (CSRF) vulnerability in Forge12 Interactive GmbH F12-Profiler f12-profiler allows Cross Site Request Forgery.This issue affects F12-Profiler: from n/a through <= 1.3.9.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00152 Published 2025-02-24 No fix listed CWE-352

TI-2023-24070 CVE-2023-45009 · GHSA-65xv-8wgg-qhxg

WordPress Captcha for Contact Form 7 plugin <= 1.11.3 - Capcha Bypass vulnerability

LOW 25

Improper Restriction of Excessive Authentication Attempts vulnerability in Forge12 Interactive GmbH Captcha/Honeypot for Contact Form 7 allows Functionality Bypass.This issue affects Captcha/Honeypot for Contact Form 7:…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00487 Published 2024-06-04 No fix listed CWE-307

Vulnerabilities

Filters

WordPress F12-Profiler Plugin <= 1.3.9 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Captcha for Contact Form 7 plugin <= 1.11.3 - Capcha Bypass vulnerability