VendorsRednaosmart_formsall versions
Vulnerabilities

Rednao Smart Forms

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2019-5924
Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.
Published 2019-03-12 · Modified
8.8EPSS 0.012
CVE-2023-49856
WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability
Published 2024-12-09 · Modified
8.8EPSS 0.005
CVE-2022-0163
Smart Forms < 2.6.71 - Subscriber+ Form Data Download
Published 2022-03-07 · Modified
6.5EPSS 0.010
CVE-2024-1307
Smart Forms < 2.6.94 - Subscriber+ Edit Entries via Broken Access Control
Published 2024-04-15 · Analyzed
6.5EPSS 0.005
CVE-2023-7203
Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion
Published 2024-02-27 · Analyzed
6.1EPSS 0.002
CVE-2024-1905
Smart Forms < 2.6.96 - Admin+ Stored XSS
Published 2024-04-29 · Analyzed
5.9EPSS 0.005
CVE-2024-1306
Smart Forms < 2.6.94 - Edit Entries via CSRF
Published 2024-04-15 · Analyzed
5.4EPSS 0.002
CVE-2024-33593
WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability
Published 2024-04-29 · Modified
4.3EPSS 0.003