simple-form
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in simpleform_get_submit_data | simple-form | WordPress | Critical | Fix reported | |
| SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register | simple-form | WordPress | Critical | Fix reported | |
| FormFlow <= 2.12.1 - Authenticated (Administrator+) Stored Cross-Site Scripting | simple-form | WordPress | Medium | Fix reported |