CVE-2026-5100 | High | 7.5 | 2026-05-05 | The AWP Classifieds plugin for WordPress is vulnerable to SQL Injection via the 'regions' parameter array keys in versions up to, and including, 4.4.5 due to i… |
CVE-2026-2890 | High | 7.5 | 2026-03-13 | The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28. This is due to the Stripe Lin… |
CVE-2026-2888 | Medium | 5.3 | 2026-03-13 | The Formidable Forms plugin for WordPress is vulnerable to an authorization bypass through user-controlled key in all versions up to, and including, 6.28. This… |
CVE-2026-1656 | Medium | 5.3 | 2026-02-18 | The Business Directory Plugin for WordPress is vulnerable to authorization bypass due to a missing authorization check in all versions up to, and including, 6… |
CVE-2026-2576 | High | 7.5 | 2026-02-18 | The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the 'payment' paramet… |
CVE-2024-13887 | Medium | 5.3 | 2025-03-13 | The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions u… |
CVE-2024-11188 | Medium | 6.1 | 2024-11-23 | The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to POST-Based Refle… |
CVE-2017-20194 | Medium | 5.3 | 2024-10-16 | The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 2.05.03 via the frm_forms_preview A… |
CVE-2017-20192 | High | 8.3 | 2024-10-16 | The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after… |
CVE-2024-6725 | Medium | 4.9 | 2024-07-31 | The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Sit… |
CVE-2023-5527 | High | 7.4 | 2024-06-18 | The Business Directory Plugin plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 6.4.3 via the class-csv-exporter.php file… |
CVE-2024-4443 | Critical | 9.8 | 2024-05-22 | The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘listingfields’ p… |
CVE-2024-0660 | Medium | 6.1 | 2024-02-05 | The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forg… |
CVE-2023-6842 | Medium | 4.4 | 2024-01-09 | The Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scrip… |
CVE-2023-6830 | Medium | 6.5 | 2024-01-09 | The Formidable Forms plugin for WordPress is vulnerable to HTML injection in versions up to, and including, 6.7. This vulnerability allows unauthenticated user… |