Sign-up Sheets

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Sign-up Sheets

Information

Software Type Plugin
Software Slug sign-up-sheets (view on wordpress.org)
Software Status Active
Software Author fetchdesigns
Software Website www.fetchdesigns.com
Software Downloads 65,572
Software Active Installs 1,000
Software Record Last Updated July 21, 2026

9 Vulnerabilities

Submit a Vulnerability
Sign-up Sheets <= 2.3.2 - Unauthenticated PHP Object Injection
8.1
CVE-2025-49393
Sep 23, 2025
Researcher: ChuongVN
Sign-up Sheets <= 2.3.3 - Cross-Site Request Forgery
4.3
CVE-2025-49391
Aug 20, 2025
Researcher: Nabil Irawan
Sign-up Sheets <= 2.3.0.1 - Unauthenticated Arbitrary Shortcode Execution
6.5
CVE-2025-26996
Apr 15, 2025
Researcher: Phan Trong Quan
Sign-up Sheets <= 2.2.12 - Reflected Cross-Site Scripting
6.1
CVE-2024-6020
Aug 13, 2024
Researcher: Bob Matyas
Sign-up Sheets <= 2.2.12 - Missing Authorization
5.3
CVE-2024-39654
Aug 1, 2024
Researcher: Joshua Chan
Sign-up Sheets <= 2.2.11.1 - Cross-Site Request Forgery
4.3
CVE-2024-31303
Apr 5, 2024
Researcher: Dhabaleshwar Das
Sign-up Sheets <= 2.2.8 - Cross-Site Request Forgery
4.3
CVE-2023-39165
Aug 7, 2023
Researcher: Nguyen Xuan Chien
Sign-up Sheets <= 1.0.13 - Authenticated CSV Injection
8.0
CVE-2021-24441
Jun 21, 2021
Researcher: Ajay Sandipan Thorbole
Sign-up Sheets <= 1.0.13 - Stored Cross-Site Scripting
4.8
CVE-2021-24440
Jun 21, 2021
Researcher: Ajay Sandipan Thorbole
Title Status CVE ID CVSS Researchers Date
Sign-up Sheets <= 2.3.2 - Unauthenticated PHP Object Injection Patched CVE-2025-49393 8.1 ChuongVN September 23, 2025
Sign-up Sheets <= 2.3.3 - Cross-Site Request Forgery Patched CVE-2025-49391 4.3 Nabil Irawan August 20, 2025
Sign-up Sheets <= 2.3.0.1 - Unauthenticated Arbitrary Shortcode Execution Patched CVE-2025-26996 6.5 Phan Trong Quan April 15, 2025
Sign-up Sheets <= 2.2.12 - Reflected Cross-Site Scripting Patched CVE-2024-6020 6.1 Bob Matyas August 13, 2024
Sign-up Sheets <= 2.2.12 - Missing Authorization Patched CVE-2024-39654 5.3 Joshua Chan August 1, 2024
Sign-up Sheets <= 2.2.11.1 - Cross-Site Request Forgery Patched CVE-2024-31303 4.3 Dhabaleshwar Das April 5, 2024
Sign-up Sheets <= 2.2.8 - Cross-Site Request Forgery Patched CVE-2023-39165 4.3 Nguyen Xuan Chien August 7, 2023
Sign-up Sheets <= 1.0.13 - Authenticated CSV Injection Patched CVE-2021-24441 8.0 Ajay Sandipan Thorbole June 21, 2021
Sign-up Sheets <= 1.0.13 - Stored Cross-Site Scripting Patched CVE-2021-24440 4.8 Ajay Sandipan Thorbole June 21, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation