Visual Form Builder

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Visual Form Builder

Information

Software Type Plugin
Software Slug visual-form-builder (view on wordpress.org)
Software Status Active
Software Author mmuro
Software Website wordpress.org
Software Downloads 1,704,052
Software Active Installs 30,000
Software Record Last Updated May 4, 2024

8 Vulnerabilities

Visual Form Builder <= 3.0.7 - Cross-Site Request Forgery to Data Modification
8.8
CVE-2022-0141
Apr 11, 2022
Researcher: Vishnupriya Ilango
Visual Form Builder <= 3.0.6 - Admin+ Cross-Site Scripting
5.5
CVE-2022-1046
Apr 7, 2022
Researcher: Akash Rajendra Patil
Visual Form Builder <= 3.0.5 - Unauthenticated Information Disclosure
5.3
CVE-2022-0140
Nov 3, 2021
Researcher: Vishnupriya Ilango
Visual Form Builder <= 3.0.5 - CSV Injection
5.3
CVE-2022-0142
Nov 3, 2021
Researcher: Vishnupriya Ilango
Visual Form Builder <= 3.0.3 - Admin+ Stored Cross-Site Scripting
4.8
CVE-2021-24514
Sep 27, 2021
Researcher: Felipe Restrepo Rodriguez (pfelilpe)
Visual Form Builder <= 2.8.2 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
May 15, 2015
Researcher: Tim Coen
Visual Form Builder <= 2.8.2 - Cross-Site Request Forgery to SQL Injection
8.8
CVE ID Unknown
May 15, 2015
Researcher: Tim Coen
Visual Form Builder <= 2.8.2 - Authenticated SQL Injection
7.2
CVE ID Unknown
May 15, 2015
Researcher: Tim Coen
Title CVE ID CVSS Researchers Date
Visual Form Builder <= 3.0.7 - Cross-Site Request Forgery to Data Modification CVE-2022-0141 8.8 Vishnupriya Ilango April 11, 2022
Visual Form Builder <= 3.0.6 - Admin+ Cross-Site Scripting CVE-2022-1046 5.5 Akash Rajendra Patil April 7, 2022
Visual Form Builder <= 3.0.5 - Unauthenticated Information Disclosure CVE-2022-0140 5.3 Vishnupriya Ilango November 3, 2021
Visual Form Builder <= 3.0.5 - CSV Injection CVE-2022-0142 5.3 Vishnupriya Ilango November 3, 2021
Visual Form Builder <= 3.0.3 - Admin+ Stored Cross-Site Scripting CVE-2021-24514 4.8 Felipe Restrepo Rodriguez (pfelilpe) September 27, 2021
Visual Form Builder <= 2.8.2 - Reflected Cross-Site Scripting 6.1 Tim Coen May 15, 2015
Visual Form Builder <= 2.8.2 - Cross-Site Request Forgery to SQL Injection 8.8 Tim Coen May 15, 2015
Visual Form Builder <= 2.8.2 - Authenticated SQL Injection 7.2 Tim Coen May 15, 2015

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation