cformsII
Information
| Software Type | Plugin |
|---|---|
| Software Slug | cforms2 (view on wordpress.org) |
| Software Status | Active |
| Software Author | bgermann |
| Software Website | wordpress.org |
| Software Downloads | 231,438 |
| Software Active Installs | 8,000 |
| Software Record Last Updated | March 5, 2023 |
9 vulnerabilities
Researcher:
Rio Darmawan
Researcher:
Jerome Bruandet
Researchers:
Researchers:
Researchers:
Researcher:
Zakhar Fedotkin
Researchers:
CVE ID Unknown
Dec 15, 2010
Researcher:
TheLightCosine
Researchers:
| Title | CVE ID | CVSS | Researchers | Date |
|---|---|---|---|---|
| cformsII <= 15.0.4 - Cross-Site Request Forgery leading to Settings Updates | CVE-2023-25449 | Rio Darmawan | March 8, 2023 | |
| CformsII <= 15.0.1 - Unauthenticated HTML Injection & Cross-Site Request Forgery | CVE-2019-15238 | Jerome Bruandet | August 12, 2019 | |
| cformsII <= 14.13.2 - Cross-Site Scripting | CVE-2017-18559 | April 28, 2017 | ||
| cformsII <= 14.12.3 - Authenticated SQL Injection | CVE-2017-18570 | April 24, 2017 | ||
| cformsII < 14.6.10 - SQL Injection | CVE-2015-9333 | April 11, 2015 | ||
| cformsII < 14.8 - Arbitrary File Upload | CVE-2014-9473 | Zakhar Fedotkin | December 29, 2014 | |
| cformsII <= 13.1 - Cross-Site Scripting | CVE-2014-10377 | October 16, 2014 | ||
| CformsII <= 14.10.1 - CAPTCHA Bypass | TheLightCosine | December 15, 2010 | ||
| CformsII <=11.5 - Cross-Site Scripting | CVE-2010-3977 | November 2, 2010 |
All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.
Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.
The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.
Documentation