Extension WordPress
Vulnérabilités Flo Forms – Easy Drag & Drop Form Builder
Cette page rassemble les failles publiées pour Flo Forms – Easy Drag & Drop Form Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Flo Forms – Easy Drag & Drop Form Builder
6 fiches
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.43 – Unauthenticated Stored Cross-Site Scripting via SVG Upload
The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.0.43. This is due to the plugin allowing…
*-1.0.43
Non indiqué
20/11/2025
Flo Forms <= 1.0.43 – Missing Authorization
The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.0.43. This makes it…
*-1.0.43
Non indiqué
07/04/2025
Flo Forms <= 1.0.42 – Missing Authorization
The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.0.42. This makes it…
*-1.0.42
1.0.43
10/05/2024
Flo Forms <= 1.0.41 – Missing Authorization via flo_send_test_email
The Flo Forms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the flo_send_test_email function in versions up to, and including, 1.0.41. This makes it possible for authenticated attackers, with…
*-1.0.41
1.0.42
09/11/2023
Flo Forms <= 1.0.40 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Flo Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.0.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
*-1.0.40
1.0.41
15/06/2023
Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 – Options Change to Stored Cross-Site Scripting
The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Options Change by using the flo_import_forms_options AJAX action in versions up to, and including, 1.0.35 due to insufficient…
*-1.0.35
1.0.36
16/03/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.