Security
فارسی
All products

buddyforms

WordPress · Plugin
24 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type ConfusionCVE-2026-107658 buddyforms WordPress Medium Fix reported
BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' ParameterCVE-2026-107622 buddyforms WordPress Critical Fix reported
BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Arbitrary Guest Attachment DeletionCVE-2026-118437 buddyforms WordPress Medium Fix reported
BuddyForms <= 2.10.0 - Missing AuthorizationCVE-2026-118101 buddyforms WordPress Medium Fix reported
BuddyForms <= 2.10.2 - Unauthenticated Information ExposureCVE-2026-118100 buddyforms WordPress Medium Fix reported
BuddyForms <= 2.8.17 - Authenticated (Contributor+) Local File InclusionCVE-2025-32151 buddyforms WordPress High No fix reported
BuddyForms <= 2.9.0 - Missing AuthorizationCVE-2025-62973 buddyforms WordPress Medium No fix reported
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.9.0 - Missing AuthorizationCVE-2026-81785 buddyforms WordPress Medium No fix reported
Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' ShortcodeCVE-2024-12038 buddyforms WordPress Medium Fix reported
Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-12037 buddyforms WordPress Medium Fix reported
BuddyForms <= 2.8.12 - Authenticated (Editor+) Stored Cross-Site ScriptingCVE-2024-47377 buddyforms WordPress Medium Fix reported
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege EscalationCVE-2024-8246 buddyforms WordPress High Fix reported
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient RandomnessCVE-2024-5149 buddyforms WordPress Medium Fix reported
BuddyForms <= 2.8.8 - Unauthenticated Arbitrary File Read and Server-Side Request ForgeryCVE-2024-32830 buddyforms WordPress Critical Fix reported
BuddyForms <= 2.8.5 - Reflected Cross-Site Scripting via pageCVE-2024-30198 buddyforms WordPress Medium Fix reported
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing AuthorizationCVE-2024-1158 buddyforms WordPress Medium Fix reported
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media UploadCVE-2024-1169 buddyforms WordPress High Fix reported
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media DeletionCVE-2024-1170 buddyforms WordPress High Fix reported
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.6.9 - Cross-Site Scripting buddyforms WordPress Medium Fix reported
Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.2.7 - SQL InjectionCVE-2018-21003 buddyforms WordPress Critical Fix reported