All products

cforms2

WordPress · Plugin
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
cformsII <= 15.1.3 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-39435 cforms2 WordPress High Fix reported
cformsII <= 15.1.3 - Cross-Site Request ForgeryCVE-2026-39436 cforms2 WordPress Medium Fix reported
cformsII <= 15.0.6 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-52203 cforms2 WordPress Medium Fix reported
cformsII <= 15.0.6 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-22149 cforms2 WordPress High Fix reported
CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request ForgeryCVE-2019-15238 cforms2 WordPress High Fix reported
cformsII <= 14.13.2 - Cross-Site ScriptingCVE-2017-18559 cforms2 WordPress Medium Fix reported
CformsII <=11.5 - Cross-Site ScriptingCVE-2010-3977 cforms2 WordPress Medium Fix reported
cformsII <= 13.1 - Cross-Site ScriptingCVE-2014-10377 cforms2 WordPress Medium Fix reported
cformsII <= 15.0.4 - Cross-Site Request Forgery leading to Settings UpdatesCVE-2023-25449 cforms2 WordPress Medium Fix reported
CformsII <= 14.10.1 - CAPTCHA Bypass cforms2 WordPress Medium Fix reported
cformsII < 14.6.10 - SQL InjectionCVE-2015-9333 cforms2 WordPress Critical Fix reported
cformsII <= 14.12.3 - Authenticated SQL InjectionCVE-2017-18570 cforms2 WordPress High Fix reported
cformsII < 14.8 - Arbitrary File UploadCVE-2014-9473 cforms2 WordPress Critical Fix reported