Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Form_vibes
(Wpvibes)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 2 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2024-01-16 | CVE-2022-3764 | The plugin does not filter the "delete_entries" parameter from user requests, leading to an SQL Injection vulnerability. | Form_vibes | 7.2 | ||
| 2024-09-05 | CVE-2024-5309 | The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the fv_export_csv, reset_settings, save_settings, save_columns_settings, get_analytics_data, get_event_logs_data, delete_submissions, and get_submissions functions in all versions up to, and including, 1.4.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform multiple... | Form_vibes | 5.4 |