Known vulnerabilities in Forminator Contact Form, Poll & Quiz Builder

Vendor: WPMU DEV
Software CPE: cpe:2.3:a:wpmu_dev:forminator:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 10
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Forminator Contact Form, Poll & Quiz Builder Forminator Contact Form, Poll & Quiz Builder is affected by 10 known vulnerabilities: 2 high, 2 medium, 6 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99769 - Cross-Site Request Forgery (CSRF)
CVE-2024-9351
CWE-352 Low
No
No
1.36.0 05.11.2024 SB2024110556
#VU99768 - Cross-Site Request Forgery (CSRF)
CVE-2024-9352
CWE-352 Low
No
No
1.36.0 05.11.2024 SB2024110556
#VU97249 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45625
CWE-79 Low
No
No
1.34.1 13.09.2024 SB2024091351
#VU88811 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31857
CWE-79 Low
No
No
1.15.4 18.04.2024 SB2024041834
#VU88810 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-31077
CWE-89 Low
No
No
1.29.3 18.04.2024 SB2024041833
#VU88808 - Unrestricted Upload of File with Dangerous Type
CVE-2024-28890
CWE-434 High
Available
No
1.29.0 18.04.2024 SB2024041832
#VU80191 - Unrestricted Upload of File with Dangerous Type
CVE-2023-4596
CWE-434 High
Available
No
1.25.0 31.08.2023 SB2023083123
#VU46784 - Cross-Site Request Forgery (CSRF)
CWE-352 Low
No
No
1.13.5 17.09.2020 SB2020091714
#VU18248 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-9568
CWE-89 Medium
No
No
1.6 12.04.2019 SB2019030407
#VU18247 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-9567
CWE-79 Medium
No
No
1.6 12.04.2019 SB2019030407