Extension WordPress
Vulnérabilités Forms by CaptainForm – Form Builder for WordPress
Cette page rassemble les failles publiées pour Forms by CaptainForm – Form Builder for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Forms by CaptainForm – Form Builder for WordPress
2 fiches
Forms by CaptainForm <= 2.5.3 – Reflected Cross-Site Scripting via REQUEST_URI
The Forms by CaptainForm plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘REQUEST_URI’ parameter in versions up to, and including, 2.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-2.5.3
Non indiqué
29/11/2023
Forms by CaptainForm <= 2.5.3 – Cross-Site Request Forgery
The Forms by CaptainForm plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.3. This is due to missing or incorrect nonce validation on one of its functions. This makes it possible…
*-2.5.3
Non indiqué
29/10/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.