Vulnerabilities > Crmperks > CRM Perks Forms

DATE CVE VULNERABILITY TITLE RISK
2024-11-01 CVE-2024-37463 Unspecified vulnerability in Crmperks CRM Perks Forms
Missing Authorization vulnerability in CRM Perks CRM Perks Forms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CRM Perks Forms: from n/a through 1.1.5.
network
low complexity
crmperks
critical
9.8
2024-03-29 CVE-2024-30446 Unspecified vulnerability in Crmperks CRM Perks Forms
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms allows Stored XSS.This issue affects CRM Perks Forms: from n/a through 1.1.4.
network
low complexity
crmperks
5.4
2024-03-29 CVE-2024-30498 Unspecified vulnerability in Crmperks CRM Perks Forms
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
network
low complexity
crmperks
critical
10.0
2024-03-29 CVE-2024-30499 Unspecified vulnerability in Crmperks CRM Perks Forms
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perks Forms.This issue affects CRM Perks Forms: from n/a through 1.1.4.
network
low complexity
crmperks
8.8
2024-02-01 CVE-2023-51536 Unspecified vulnerability in Crmperks CRM Perks Forms 1.1.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CRM Perks CRM Perks Forms – WordPress Form Builder allows Stored XSS.This issue affects CRM Perks Forms – WordPress Form Builder: from n/a through 1.1.2.
network
low complexity
crmperks
4.8
2023-05-31 CVE-2023-2836 Cross-site Scripting vulnerability in Crmperks CRM Perks Forms 1.1.1
The CRM Perks Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form settings in versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping.
network
low complexity
crmperks CWE-79
4.8
2023-01-14 CVE-2022-38467 Unspecified vulnerability in Crmperks CRM Perks Forms
Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver.
network
low complexity
crmperks
6.1