Extension WordPress
Vulnérabilités FormFacade – Embed Google Forms in your website
Cette page rassemble les failles publiées pour FormFacade – Embed Google Forms in your website, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de FormFacade – Embed Google Forms in your website
5 fiches
FormFacade <= 1.4.1 – Cross-Site Request Forgery
The FormFacade plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.4.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to…
*-1.4.1
Non indiqué
31/12/2025
FormFacade <= 1.3.6 – Reflected Cross-Site Scripting
The FormFacade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-1.3.6
1.3.7
11/12/2024
FormFacade – WordPress plugin for Google Forms <= 1.3.6 – Reflected Cross-Site Scripting
The FormFacade – WordPress plugin for Google Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'userId' and 'publishId' parameters in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output…
*-1.3.6
1.3.7
25/10/2024
FormFacade <= 1.3.2 – Reflected Cross-Site Scripting
The FormFacade – WordPress plugin for Google Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'redirectURL' parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This…
*-1.3.2
1.3.3
16/08/2024
FormFacade <= 1.0.0 – Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
The FormFacade – WordPress plugin for Google Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on…
*-1.0.0
1.2.2
20/02/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.