Projectcaruso

4 CVEs across 2 Projectcaruso products. Browse Projectcaruso vulnerabilities, severities, and proof-of-concept exploits.

Projectcaruso products with known CVEs

ProductCVEs
Flaming Forms2
Pray For Me2
Projectcaruso CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-7692Medium6.12024-09-02The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-S…
CVE-2024-7691Medium6.12024-09-02The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Sc…
CVE-2024-3966Medium6.12024-06-14The Pray For Me WordPress plugin through 1.0.4 does not sanitise and escape some parameters, which could unauthenticated visitors to perform Cross-Site Scripti…
CVE-2024-3965Medium5.42024-06-14The Pray For Me WordPress plugin through 1.0.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in ad…