What’s Vulnerable › Products

themekraft Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your themekraft Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions version is affected

Latest themekraft Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions vulnerabilities

• CVE-2024-12037 — Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-1170 — Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Deletion (CVSS 8.2)
• CVE-2024-1169 — Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload (CVSS 7.5)
• CVE-2023-25981 — WordPress BuddyForms Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)