Filtered by vendor Rednao
Subscriptions
Filtered by product Smart Forms
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2019-5924 | 1 Rednao | 1 Smart Forms | 2024-08-04 | 8.8 High |
| Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page. | ||||
| CVE-2022-0163 | 1 Rednao | 1 Smart Forms | 2024-08-02 | 6.5 Medium |
| The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form. | ||||
Page 1 of 1.