Extension WordPress
Vulnérabilités eForm – WordPress Form Builder
Cette page rassemble les failles publiées pour eForm – WordPress Form Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de eForm – WordPress Form Builder
2 fiches
eForm – WordPress Form Builder < 4.19.1 – Reflected Cross-Site Scripting
The eForm – WordPress Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to 4.19.1 (exclusive) due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
[*, 4.19.1)
4.19.1
11/06/2025
eForm <= 4.18.0 – Unauthenticated Stored Cross-Site Scripting
The eForm – WordPress Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.18.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-4.18.0
4.19
24/04/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.