Vendor/product archive

themekraft / post_form CVEs

Beta · best-effort

3 CVEs tagged to themekraft / post_form — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to themekraft vendor archive

CVE-2024-1170

Published Mar 7, 2024

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized media fil…

CVSS 8.2 · High

Vendor/product tagsBeta · best-effort

CVE-2024-1169

Published Mar 7, 2024

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized media upl…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2023-25981

Published Aug 25, 2023

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form plugin <= 2.8.1 versions.

CVSS 6.5 · Medium

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1