Funnelforms Funnelforms Free
5 CVEs affecting Funnelforms Funnelforms Free. Latest disclosed: 2024-08-29. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6311 | High | 7.2 | 2024-08-28 | The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'af2_add_font' function in all ver… |
CVE-2024-6312 | Medium | 6.5 | 2024-08-28 | The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.7.3.2 via the 'af2DeleteFontFile' fu… |
CVE-2023-5990 | Medium | 6.5 | 2023-12-04 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2 does not have CSRF checks on some of its form ac… |
CVE-2024-5857 | Medium | 5.3 | 2024-08-29 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to unauthorized loss of… |
CVE-2024-7447 | Medium | 5.3 | 2024-08-28 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to unauthorized modifica… |