Vulnerabilities

TI-2025-18492 CVE-2025-24775 · GHSA-rvx4-v22c-v526

WordPress Forms <= 2.9.0 - Arbitrary File Upload Vulnerability

MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00467 Published 2025-08-14 No fix listed CWE-434

TI-2024-34695 CVE-2024-51791 · GHSA-4h3w-cwc4-8rm4

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00627 Published 2024-11-11 No fix listed CWE-434

TI-2021-06792 CVE-2021-24505 · GHSA-chv5-257q-w5jx

LOW 25

The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2021-08-09 Fixed in 1.12.3 CWE-79