Vulnerabilities

TI-2025-16390 CVE-2025-22504 · GHSA-xmmp-pp2j-r7jm

WordPress 4ECPS Web Forms Plugin <= 0.2.18 - Arbitrary File Upload vulnerability

MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in jumpdemand 4ECPS Web Forms 4ecps-webforms allows Upload a Web Shell to a Web Server.This issue affects 4ECPS Web Forms: from n/a through <= 0.2.18.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00499 Published 2025-01-09 No fix listed CWE-434

TI-2024-23507 CVE-2024-35638 · GHSA-882q-wcp5-p64r

WordPress ActiveDEMAND plugin <= 0.2.43 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in JumpDEMAND Inc.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00172 Published 2024-06-03 No fix listed CWE-352

TI-2024-21683 CVE-2024-32809 · GHSA-9x6v-hgqm-vvp7

WordPress ActiveDEMAND plugin <= 0.2.41 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00548 Published 2024-05-17 No fix listed CWE-434

TI-2022-21947 CVE-2022-44628 · GHSA-x7j5-2qjw-2rrx

WordPress 4ECPS Web Forms plugin <= 0.2.17 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in JumpDEMAND Inc.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0055 Published 2022-11-03 No fix listed CWE-79

TI-2022-16647 CVE-2022-36296 · GHSA-mp4f-pwv2-xxc8

WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability

LOW 36

Broken Authentication vulnerability in JumpDEMAND Inc.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00702 Published 2022-08-05 No fix listed CWE-287