همهٔ محصولات
sureforms
WordPress · افزونه23 گزارش| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|
| SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.9 -Unauthenticated Arbitrary HTML InjectionCVE-2026-116402 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.9 - Missing AuthorizationCVE-2026-116387 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-108495 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms – Drag and Drop Form Builder for WordPress <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-8282 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2025-3513 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.5 - Unauthenticated Insecure Direct Object ReferenceCVE-2026-85308 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded PayloadCVE-2026-18406 |
sureforms |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block AttributeCVE-2026-7623 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms <= 2.11.0 - Unauthenticated Payment Amount BypassCVE-2026-11567 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount ManipulationCVE-2026-15288 |
sureforms |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information ExposureCVE-2025-12536 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'CVE-2026-4987 |
sureforms |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| SureForms <= 2.2.1 - Missing Authorization |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-14855 |
sureforms |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce DistributionCVE-2025-12535 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information DisclosureCVE-2025-10732 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form CreationCVE-2025-10489 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms <= 1.7.1 - Reflected Cross-Site ScriptingCVE-2025-5921 |
sureforms |
WordPress |
متوسط
|
اصلاح گزارش شده |
|
| SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission DeletionCVE-2025-6691 |
sureforms |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
| SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission DeletionCVE-2025-6742 |
sureforms |
WordPress |
زیاد
|
اصلاح گزارش شده |
|
