Smart Forms (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-04-29. Vendor: Unknown.

CVEs of Smart Forms

• CVE-2024-1905 - CVSS 5.9 (medium), 2024-04-29: The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2024-1307 - CVSS 6.5 (medium), 2024-04-15: The Smart Forms WordPress plugin before 2.6.94 does not have proper authorization in some actions, which could allow users with a role as low as a subscriber…
• CVE-2024-1306 - CVSS 5.4 (medium), 2024-04-15: The Smart Forms WordPress plugin before 2.6.94 does not have CSRF checks in some places, which could allow attackers to make logged-in users perform unwanted…
• CVE-2023-7203 - CVSS 6.1 (medium), 2024-02-27: The Smart Forms WordPress plugin before 2.6.87 does not have authorisation in various AJAX actions, which could allow users with a role as low as subscriber…