Formassembly - vulnerabilities (CVEs)

3 CVEs in 2 products, 0 in the last 30 days, newest from 2025-02-18.

Products

• Wpformassembly - 2 CVEs
• Wp-formassembly - 1 CVEs

Newest CVEs of Formassembly

• CVE-2024-13501 - CVSS 6.4 (medium), 2025-02-18: The WP-FormAssembly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'formassembly' shortcode in all versions up to, and…
• CVE-2022-45852 - CVSS 6.5 (medium), 2024-04-24: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in FormAssembly / Drew Buschhorn WP-FormAssembly allows Path…
• CVE-2023-49768 - CVSS 6.5 (medium), 2024-04-18: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FormAssembly / Drew Buschhorn WP-FormAssembly allows…