FV
Product
Form Vibes
3
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Form Vibes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3764 | 7.2 | Jan 16 | The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability Affected: before 1.4.6 |
| CVE-2024-5325 | 6.5 | Jul 12 | Form Vibes <= 1.4.10 - Authenticated (Subscriber+) SQL Injection via fv_export_data Affected: before 1.4.11 |
| CVE-2024-5309 | 5.4 | Sep 5 | Form Vibes – Database Manager for Forms <= 1.4.12 - Missing Authorization in Multiple Functions Affected: before 1.4.13 |
Showing 3