Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: wpazleen Clear all filters
TI-2026-83523 CVE-2026-118235 · GHSA-wjww-5gvr-r96j

Arbitrary file upload in SimpleForm WordPress plugin

Priority MEDIUM 50

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload functio…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0074 Published 2026-10-31 No fix listed CWE-434
TI-2026-76039 CVE-2026-110268 · GHSA-4rjp-9x4j-xqhv

Path traversal in Post Export Import with Media WordPress plugin

Priority LOW 24

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme_slug' parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00766 Published 2026-10-17 No fix listed CWE-22
TI-2026-73821 CVE-2026-104764 · GHSA-g9fm-v4gr-h48h

Post Export Import with Media: Authenticated PHP Object Injection

Priority LOW 35

The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input .

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00625 Published 2026-10-14 No fix listed CWE-502
TI-2026-73817 CVE-2026-104748 · GHSA-5hqh-jvjf-mpvw

SimpleForm Unauthenticated Privilege Escalation via wp_capabilities

Priority MEDIUM 50

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_no…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00833 Published 2026-10-14 No fix listed CWE-269
TI-2026-70261 CVE-2026-104763 · GHSA-vxwp-9pcg-465r

Path traversal in Post Export Import with Media allows file reads

Priority LOW 24

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00732 Published 2026-10-10 No fix listed CWE-22
TI-2026-11366 CVE-2026-13430 · GHSA-mxq7-wpp5-2fc9

Unrestricted file upload in wpazleen Post Export Import with Media

Priority LOW 36

The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the import_media_file_secure function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01149 Published 2026-07-10 No fix listed CWE-434