Extension WordPress
Vulnérabilités WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto
Cette page rassemble les failles publiées pour WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto
8 fiches
Freemius <= 2.10.1 – Reflected DOM-Based Cross-Site Scripting via url Parameter
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-8.0.7
8.0.8
30/04/2026
Tripetto <= 8.0.9 – Cross-Site Request Forgery to Arbitrary Results Deletion
The Tripetto plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.0.9. This is due to missing nonce validation. This makes it possible for unauthenticated attackers to delete arbitrary results via…
*-8.0.9
8.0.10
14/03/2025
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 – Unauthenticated Stored Cross-Site Scripting
The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via attachment uploads in all versions up to, and including, 8.0.9 due to insufficient input sanitization…
*-8.0.9
8.0.10
14/03/2025
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 – Unauthenticated Sensitive Information Exposure
The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 8.0.8 via the 'attachments.php' file. This makes it possible…
*-8.0.8
8.0.9
04/02/2025
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.6 – Unauthenticated Stored Cross-Site Scripting
The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.0.6 due to insufficient input sanitization and output escaping.…
*-8.0.6
8.0.7
06/01/2025
Tripetto <= 8.0.11 – Unauthentiated Stored Cross-Site Scripting via Form File Upload
The Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 8.0.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-8.0.11
Non indiqué
14/11/2024
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 5.1.4 – Unauthenticated Stored Cross-Site Scripting
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto versions below 5.2 are vulnerable to Cross-Site Scripting. This allows unauthenticated attackers to inject JavaScript into the database.
*-5.1.4
5.2.0
26/04/2022
Freemius SDK <= 2.4.2 – Missing Authorization Checks
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions…
[*, 5.3.1)
5.3.1
04/03/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.