Filtered by vendor Wpvibes
Subscriptions
Filtered by product Form Vibes
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-3764 | 1 Wpvibes | 1 Form Vibes | 2024-11-21 | 7.2 High |
| The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability. | ||||
| CVE-2024-5309 | 1 Wpvibes | 1 Form Vibes | 2024-09-11 | 5.4 Medium |
| The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the fv_export_csv, reset_settings, save_settings, save_columns_settings, get_analytics_data, get_event_logs_data, delete_submissions, and get_submissions functions in all versions up to, and including, 1.4.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform multiple unauthorized actions. NOTE: This vulnerability is partially fixed in version 1.4.12. | ||||
Page 1 of 1.