Funnelforms Interactive Contact Form And Multi Step Form Builder With Drag & Drop Editor – Funnelforms Free
15 CVEs affecting Funnelforms Interactive Contact Form And Multi Step Form Builder With Drag & Drop Editor – Funnelforms Free. Latest disclosed: 2024-12-04. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-10587 | High | 8.8 | 2024-12-04 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to PHP Object Injection… |
CVE-2024-6311 | High | 7.2 | 2024-08-28 | The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'af2_add_font' function in all ver… |
CVE-2024-6312 | Medium | 6.5 | 2024-08-28 | The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.7.3.2 via the 'af2DeleteFontFile' fu… |
CVE-2023-5386 | Medium | 6.5 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_delete_posts functio… |
CVE-2023-5382 | Medium | 6.5 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4. This is due to missing or incorrec… |
CVE-2024-5857 | Medium | 5.3 | 2024-08-29 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to unauthorized loss of… |
CVE-2024-7447 | Medium | 5.3 | 2024-08-28 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress is vulnerable to unauthorized modifica… |
CVE-2023-5419 | Medium | 4.3 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_test_mail functi… |
CVE-2023-5417 | Medium | 4.3 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_update_category func… |
CVE-2023-5416 | Medium | 4.3 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_delete_category func… |
CVE-2023-5415 | Medium | 4.3 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_add_category functio… |
CVE-2023-5411 | Medium | 4.3 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_save_post functi… |
CVE-2023-5387 | Medium | 4.3 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_trigger_dark_mod… |
CVE-2023-5385 | Medium | 4.3 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_copy_posts function… |
CVE-2023-5383 | Medium | 4.3 | 2023-11-22 | The Funnelforms Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4. This is due to missing or incorrec… |