Post Form Registration Form Profile Form For User Profiles And Content Forms
Approved changes feed: RSS · Atom
cpe:2.3:a:themekraft:post_form_registration_form_profile_form_for_user_profiles_and_content_forms:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Themekraft (0a38db96-7a4d-5481-be58-9f9a542a5ea6) |
|---|---|
| Product | Post Form Registration Form Profile Form For User Profiles And Content Forms (89239c7f-08d6-5d1c-b47d-7f3898fd256c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8246 |
vulnerable | 2026-06-08 07:00:23.358314 |
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation
HIGH (8.8)
The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.8.11. This is due to plugin not properly restricting what users have access to set the default role on registration forms. This makes it possible for authenticated attackers, with contributor-level access and above, to create a registration form with a custom role that allows them to register as administrators.
Published: 2024-09-14T03:19:27.488Z
Updated: 2026-04-08T16:48:24.571Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5149 |
vulnerable | 2026-06-08 06:56:15.000313 |
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
MEDIUM (6.5)
The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an insufficiently random activation code. This makes it possible for unauthenticated attackers to bypass the email verification.
Published: 2024-06-05T04:32:25.171Z
Updated: 2026-04-08T17:13:20.043Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38971 |
vulnerable | 2026-06-08 05:47:17.559067 |
WordPress BuddyForms Plugin <= 2.7.5 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (4.7)
Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5 versions.
Published: 2023-03-16T08:49:16.146Z
Updated: 2026-04-28T16:07:47.590Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.