What’s Vulnerable › Products

cscode EleForms – All In One Form Integration including DB for Elementor vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your cscode EleForms – All In One Form Integration including DB for Elementor version is affected

Latest cscode EleForms – All In One Form Integration including DB for Elementor vulnerabilities

• CVE-2024-6628 — EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery (CVSS 4.3)
• CVE-2024-6626 — EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization (CVSS 5.3)
• CVE-2024-38748 — WordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerability (CVSS 9.8)
• CVE-2024-2082 — EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
• CVE-2024-2043 — EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Missing Authorization to Sensitive Information Exposure (CVSS 5.3)