Vulnerabilities > Funnelforms
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-11-22 | CVE-2023-5411 | Missing Authorization vulnerability in Funnelforms The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_save_post function in versions up to, and including, 3.4. | 4.3 |
| 2023-11-22 | CVE-2023-5415 | Missing Authorization vulnerability in Funnelforms The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_add_category function in versions up to, and including, 3.4. | 4.3 |
| 2023-11-22 | CVE-2023-5416 | Missing Authorization vulnerability in Funnelforms The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_delete_category function in versions up to, and including, 3.4. | 4.3 |
| 2023-11-22 | CVE-2023-5417 | Missing Authorization vulnerability in Funnelforms The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_update_category function in versions up to, and including, 3.4. | 4.3 |
| 2023-11-22 | CVE-2023-5419 | Missing Authorization vulnerability in Funnelforms The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_af2_test_mail function in versions up to, and including, 3.4. | 4.3 |
| 2023-10-16 | CVE-2023-4950 | Unspecified vulnerability in Funnelforms The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and escape some parameters, which could allow unauthenticated users to perform Cross-Site Scripting attacks | 6.1 |