Filtered by vendor Wpvibes Subscriptions
Filtered by product Form Vibes Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-5309 1 Wpvibes 1 Form Vibes 2024-09-11 5.4 Medium
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the fv_export_csv, reset_settings, save_settings, save_columns_settings, get_analytics_data, get_event_logs_data, delete_submissions, and get_submissions functions in all versions up to, and including, 1.4.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform multiple unauthorized actions. NOTE: This vulnerability is partially fixed in version 1.4.12.
CVE-2022-3764 1 Wpvibes 1 Form Vibes 2024-08-03 7.2 High
The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability.