Plugin: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Versions: <= 6.2.8
CVSS: 6.1/10
Correctif: 6.2.9

31 juil. 2026

Lire

Kali Forms — Contact Form & Drag-and-Drop Builder

ÉlevéeCVSS 8.1

CVE-2026-16144

Exécution de code à distance (RCE), non authentifié, dans Kali Forms — Contact Form & Drag-and-Drop Builder (<= 2.4.20)

Plugin: Kali Forms — Contact Form & Drag-and-Drop Builder
Versions: <= 2.4.20
CVSS: 8.1/10
Correctif: 2.4.21

Défaut de contrôle d'accès, non authentifié, dans Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder (<= 1.9.0)

Plugin: Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder
Versions: <= 1.9.0
CVSS: 5.3/10
Correctif: 2.0.0

Défaut de contrôle d'accès, non authentifié, dans Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (<= 6.2.8)

Plugin: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Versions: <= 6.2.8
CVSS: 5.3/10
Correctif: 6.2.9

XSS stocké, non authentifié, dans Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (<= 6.2.7)

Plugin: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Versions: <= 6.2.7
CVSS: 7.2/10
Correctif: 6.2.8

XSS stocké, authentifié (Contributeur+), dans Contact Form to Any API (<= 3.0.6)

Plugin: Contact Form to Any API
Versions: <= 3.0.6
CVSS: 6.4/10
Correctif: 3.0.7

Injection SQL, authentifié (Administrateur+), dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.14.9)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.14.9
CVSS: 4.9/10
Correctif: 3.14.10

Faille de sécurité, non authentifié, dans Contact Form 7 – Dynamic Text Extension (<= 5.0.3)

Plugin: Contact Form 7 – Dynamic Text Extension
Versions: <= 5.0.3
CVSS: 6.5/10
Correctif: Aucun

XSS stocké, authentifié (Contributeur+), dans WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More (<= 2.0.0.1)

Plugin: WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
Versions: <= 2.0.0.1
CVSS: 4.9/10
Correctif: 2.0.0.2

XSS stocké, non authentifié, dans Kali Forms — Contact Form & Drag-and-Drop Builder (<= 2.4.18)

Plugin: Kali Forms — Contact Form & Drag-and-Drop Builder
Versions: <= 2.4.18
CVSS: 7.2/10
Correctif: 2.4.19

XSS stocké, non authentifié, dans Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database (<= 1.5.2)

Plugin: Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database
Versions: <= 1.5.2
CVSS: 7.2/10
Correctif: 1.5.3

10 juil. 2026

Lire

13 – 24 sur 978 articles