cve.bz

themekraft buddyforms vulnerabilities in 2025, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 5.3CVE-2025-62973EPSS 0.2%

    Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2.

  2. 8.8CVE-2025-32151EPSS 1.0%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themekraft BuddyForms buddyforms allows PHP Local File Inclusion.This issue affects BuddyForms: from n/a through 2.10.…

  3. 5.4CVE-2024-12038EPSS 0.2%

    The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyforms_nav' shortcode in all ver…