Vulnerabilities > Wpvibes > Form Vibes
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-05 | CVE-2024-5309 | Missing Authorization vulnerability in Wpvibes Form Vibes The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the fv_export_csv, reset_settings, save_settings, save_columns_settings, get_analytics_data, get_event_logs_data, delete_submissions, and get_submissions functions in all versions up to, and including, 1.4.12. | 5.4 |
| 2024-01-16 | CVE-2022-3764 | SQL Injection vulnerability in Wpvibes Form Vibes The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability. | 7.2 |