Web-Dorado Wp Form Builder
2 CVEs affecting Web-Dorado Wp Form Builder. Latest disclosed: 2023-11-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11557 | High | 8.8 | 2019-04-26 | The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file i… |
CVE-2023-5048 | Medium | 6.4 | 2023-11-22 | The WDContactFormBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Contact_Form_Builder' shortcode in versions up to, and incl… |