Html Forms (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-31. Vendor: Unknown.

CVEs of Html Forms

• CVE-2024-6412 - CVSS 6.5 (medium), 2024-07-31: The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted…
• CVE-2024-6243 - CVSS 5.9 (medium), 2024-07-22: The HTML Forms WordPress plugin before 1.3.33 does not sanitize and escape the form message inputs, allowing high-privilege users, such as administrators, to…
• CVE-2022-3689 - CVSS 7.2 (high), 2022-11-28: The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL statement, leading to a SQL injection…