PF
Product
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 4Low 0
Watch
Add Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8246 | 8.8 | Sep 14 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation Affected: through 2.8.11 |
| CVE-2024-1170 | 8.2 | Mar 7 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Deletion Affected: through 2.8.7 |
| CVE-2024-1169 | 7.5 | Mar 7 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload Affected: through 2.8.7 |
| CVE-2024-12037 | 6.4 | Jan 31 | Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.8.13 |
| CVE-2024-12038 | 5.4 | Feb 22 | Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode Affected: through 2.8.15 |
| CVE-2024-5149 | 5.3 | Jun 5 | BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness Affected: through 2.8.9 |
| CVE-2024-1158 | 4.3 | Mar 13 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization Affected: through 2.8.7 |
Showing 7