Extension WordPress
Vulnérabilités Forminator Forms – Contact Form, Payment Form & Custom Form Builder, page 3
Cette page rassemble les failles publiées pour Forminator Forms – Contact Form, Payment Form & Custom Form Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Forminator Forms – Contact Form, Payment Form & Custom Form Builder
44 fiches
Forminator <= 1.14.11 – Unauthenticated Stored Cross-Site Scripting
The Forminator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.14.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
[*, 1.14.12)
1.14.12
14/07/2021
Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 – Cross-Site Request Forgery Bypass
The Forminator – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.13.4. This is due to missing or incorrect nonce validation on the…
[*, 1.13.5)
1.13.5
01/03/2021
Forminator Plugin <= 1.5.3.1 – SQL Injection
The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=forminator-entries entry[] parameter if the attacker has the delete permission.
[*, 1.6)
1.6
06/02/2019
Forminator Plugin <= 1.5.4 – Cross-Site Scripting
The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll.
[*, 1.6)
1.6
06/02/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.