Login Request a demo
CF
Product
Cformsii
by Cformsii Project · last CVE Jan 8, 2024
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 2High 2Medium 5Low 0
Severity
All severities9Critical2High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cformsii to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-18570
9.8
2%
Aug 22
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries
Affected: before 14.13
CVE-2015-9333
9.8
2%
Aug 22
The cforms2 plugin before 14.6.10 for WordPress has SQL injection
Affected: before 14.6.10
CVE-2023-25449
8.8
0%
Jun 15
WordPress CformsII Plugin <=15.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: before 15.0.5
CVE-2019-15238
8.8
1%
Aug 20
The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field
Affected: before 15.0.2
CVE-2014-10393
6.1
1%
Aug 22
The cforms2 plugin before 10.5 for WordPress has XSS
Affected: before 10.5
CVE-2014-10392
6.1
1%
Aug 22
The cforms2 plugin before 10.2 for WordPress has XSS
Affected: before 10.2
CVE-2017-18559
6.1
1%
Aug 21
The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues
Affected: before 14.13.3
CVE-2014-10377
6.1
1%
Aug 21
The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php
Affected: before 13.2
CVE-2023-52203
4.8
0%
Jan 8
WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)
Affected: through 15.0.5
Showing 9