Approved changes feed: RSS · Atom
cpe:2.3:a:cformsii_project:cformsii:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Cformsii Project (2d23243a-9e55-5512-a317-7026b085880a) |
|---|---|
| Product | Cformsii (4cfe479a-a3e7-52b9-aeb3-f6a2c3aa5dfb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-52203 |
vulnerable | 2026-06-08 06:17:54.453496 |
WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsII allows Stored XSS.This issue affects cformsII: from n/a through 15.0.5.
Published: 2024-01-08T19:54:17.783Z
Updated: 2026-04-28T16:09:06.822Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25449 |
vulnerable | 2026-06-08 05:56:08.816128 |
WordPress CformsII Plugin <=15.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions.
Published: 2023-06-15T11:58:41.088Z
Updated: 2026-04-28T16:08:07.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15238 |
vulnerable | 2026-06-08 05:12:56.833119 |
Details available
The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.
Published: 2019-08-20T14:54:59.000Z
Updated: 2024-08-05T00:42:00.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18570 |
vulnerable | 2026-06-08 05:09:11.263089 |
Details available
The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.
Published: 2019-08-22T12:13:05.000Z
Updated: 2024-08-05T21:28:55.389Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18559 |
vulnerable | 2026-06-08 05:09:11.250999 |
Details available
The cforms2 plugin before 14.13.3 for WordPress has multiple XSS issues.
Published: 2019-08-21T18:12:14.000Z
Updated: 2024-08-05T21:28:55.298Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9333 |
vulnerable | 2026-06-08 05:07:13.576287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-10393 |
vulnerable | 2026-06-08 05:05:15.666693 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-10392 |
vulnerable | 2026-06-08 05:05:15.666449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-10377 |
vulnerable | 2026-06-08 05:05:15.646799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.