Vulnerabilities

TI-2025-38455 CVE-2025-62133 · GHSA-98mh-7f53-rrrm

WordPress FormFacade plugin <= 1.4.1 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in manidoraisamy FormFacade formfacade allows Cross Site Request Forgery.This issue affects FormFacade: from n/a through <= 1.4.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00119 Published 2025-12-31 No fix listed CWE-352

TI-2024-36389 CVE-2024-54301 · GHSA-8j4x-2cxg-566c

WordPress FormFacade plugin <= 1.3.6 - Reflected Cross Site Scripting (XSS) vulnerability

MEDIUM 64

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in manidoraisamy FormFacade formfacade allows Reflected XSS.This issue affects FormFacade: from n/a through <= 1.3.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00437 Published 2024-12-13 No fix listed CWE-79

TI-2024-08918 CVE-2024-9613 · GHSA-84h4-mqx2-c87g

FormFacade – WordPress plugin for Google Forms <= 1.3.6 - Reflected Cross-Site Scripting

LOW 29

The FormFacade – WordPress plugin for Google Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'userId' and 'publishId' parameters in all versions up to, and including, 1.3.6 due to insuf…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00386 Published 2024-10-26 No fix listed CWE-79

TI-2024-28965 CVE-2024-43313 · GHSA-f92x-jr4c-pc3h

WordPress FormFacade plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in manidoraisamy FormFacade formfacade allows Reflected XSS.This issue affects FormFacade: from n/a through <= 1.3.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-08-18 No fix listed CWE-79

TI-2024-17034 CVE-2024-25934 · GHSA-jw74-jmpx-mj4j

WordPress FormFacade plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability