Login Request a demo
IN
Vendor
Incsub
4 products with CVEs on record
28
CVEs
0
On KEV
0
New 30D
Products
FO
Forminator
Incsub
9.8
21 CVEs0 on KEV0 new
HU
Hummingbird
Incsub
9.8
4 CVEs0 on KEV0 new
HU
Hustle
Incsub
8.8
2 CVEs0 on KEV0 new
BU
Buddypress-activity-plus
Incsub
8.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-6464
FO
Forminator
Incsub
8.8
1%
Jul 2Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated PHP Object Injection (PHAR) Triggered via Administrator Form Submission Deletion
CVE-2025-6463
FO
Forminator
Incsub
8.8
15%
Jul 2Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submission Deletion
CVE-2024-43118
HU
Hummingbird
Incsub
8.8
1%
Nov 1WordPress Hummingbird plugin <= 3.9.1 - Broken Access Control vulnerability
CVE-2024-10402
FO
Forminator
Incsub
8.8
1%
Oct 26Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.35.1 - Missing Authorization to Authenticated (Contributor+) Form Update and Creation
CVE-2024-45625
FO
Forminator
Incsub
6.1
0%
Sep 9Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1
CVE-2024-7389
FO
Forminator
Incsub
7.5
1%
Aug 2Forminator <= 1.29.1 - HubSpot Developer API Key Sensitive Information Exposure
CVE-2024-32792
HU
Hummingbird
Incsub
5.3
0%
Jun 9WordPress Hummingbird plugin <= 3.7.3 - Broken Access Control vulnerability
CVE-2024-28890
FO
Forminator
Incsub
5.3
1%
Apr 23Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability
CVE-2024-31077
FO
Forminator
Incsub
7.2
30%
Apr 23Forminator prior to 1.29.3 contains a SQL injection vulnerability
CVE-2024-31857
FO
Forminator
Incsub
5.4
1%
Apr 23Forminator prior to 1.15.4 contains a cross-site scripting vulnerability
CVE-2024-1794
FO
Forminator
Incsub
6.1
1%
Apr 9Forminator <= 1.29.0 - Unauthenticated Stored Cross-Site Scripting via File Upload
CVE-2024-3053
FO
Forminator
Incsub
5.4
0%
Apr 9Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.29.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via forminator_form Shortcode
CVE-2024-29777
FO
Forminator
Incsub
6.1
0%
Mar 27WordPress Forminator plugin <= 1.29.0 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2023-5119
FO
Forminator
Incsub
4.8
0%
Nov 20Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting
CVE-2023-6133
FO
Forminator
Incsub
4.9
1%
Nov 15Forminator <= 1.27.0 - Authenticated (Administrator+) Arbitrary File Upload
CVE-2023-4596
FO
Forminator
Incsub
9.8
14%
Aug 30Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
CVE-2023-3134
FO
Forminator
Incsub
6.1
4%
Jul 31Forminator < 1.24.4 - Reflected XSS
CVE-2021-4417
FO
Forminator
Incsub
4.3
0%
Jul 12Forminator – Contact Form, Payment Form & Custom Form Builder <= 1.13.4 - Cross-Site Request Forgery Bypass
CVE-2023-2010
FO
Forminator
Incsub
3.1
0%
Jul 4Forminator < 1.24.1 - Unauthenticated Race Condition on poll vote
CVE-2023-1478
HU
Hummingbird
Incsub
9.8
1%
Apr 10Hummingbird < 3.4.2 - Unauthenticated Path Traversal
CVE-2021-36821
FO
Forminator
Incsub
6.1
0%
Mar 16WordPress Forminator plugin <= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability
CVE-2022-0994
HU
Hummingbird
Incsub
4.8
3%
Apr 18Hummingbird < 3.3.2 - Admin+ Stored Cross-Site Scripting
CVE-2021-24700
FO
Forminator
Incsub
4.8
1%
Nov 23Forminator < 1.15.4 - Admin+ Stored Cross-Site Scripting
CVE-2018-18576
HU
Hustle
Incsub
5.3
1%
Mar 17The Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to obtain a directory listing via the views/admin/dashboard/ URI
CVE-2015-9455
BU
Buddypress-activity-plus
Incsub
8.1
1%
Oct 7The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a…
CVE-2019-11872
HU
Hustle
Incsub
8.8
2%
May 29The Hustle (aka wordpress-popup) plugin 6.0.7 for WordPress is vulnerable to CSV Injection as it allows for injecting malicious code into a pop-up window
CVE-2019-9568
FO
Forminator
Incsub
6.5
2%
Mar 4The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=forminator-entries entry[] parameter if the…
CVE-2019-9567
FO
Forminator
Incsub
6.1
1%
Mar 4The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has XSS via a custom input field of a poll