Vulnerabilities > Theinnovs

DATE CVE VULNERABILITY TITLE RISK
2024-11-06 CVE-2024-6626 Missing Authorization vulnerability in Theinnovs Eleforms
The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all versions up to, and including, 2.9.9.9.
network
low complexity
theinnovs CWE-862
5.3
2023-12-14 CVE-2023-49171 Unspecified vulnerability in Theinnovs Innovs HR 1.0.3.4
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TheInnovs Innovs HR – Complete Human Resource Management System for Your Business allows Reflected XSS.This issue affects Innovs HR – Complete Human Resource Management System for Your Business: from n/a through 1.0.3.4.
network
low complexity
theinnovs
6.1