Vulnerabilities

TI-2026-30918 CVE-2026-42659 · GHSA-7gmg-2w3g-286j

WordPress Advanced Form Integration plugin <= 1.126.12 - Broken Access Control vulnerability

LOW 28

Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00271 Published 2026-06-15 No fix listed CWE-862

TI-2024-37262 CVE-2024-56293 · GHSA-m4mw-x2q4-jx9x

WordPress AFI – The Easiest Integration Plugin <= 1.95.0 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Stored XSS.This issue affects Advanced Form Int…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00319 Published 2025-01-07 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Advanced Form Integration plugin <= 1.126.12 - Broken Access Control vulnerability

WordPress AFI – The Easiest Integration Plugin <= 1.95.0 - Cross Site Scripting (XSS) vulnerability