Approved changes feed: RSS · Atom

cpe:2.3:a:spiderteams:applyonline_-_application_form_builder_and_manager:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSpiderteams (6e2b96cc-dd20-5b16-9a25-6f72f3d3c13e)
ProductApplyonline Application Form Builder And Manager (f7cb7e5e-c712-5038-85c8-2af18b01891a)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-10098 vulnerable 2026-06-08 06:22:03.563076 ApplyOnline – Application Form Builder and Manager < 2.6.3 - Unauthenticated Application File Access
The ApplyOnline WordPress plugin before 2.6.3 does not protect uploaded files during the application process, allowing unauthenticated users to access them and any private information they contain
Published: 2025-05-15T20:06:40.631Z
Updated: 2025-05-20T16:05:10.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45756 vulnerable 2026-06-08 06:12:43.256745 WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spider Teams ApplyOnline – Application Form Builder and Manager plugin <= 2.5.2 versions.
Published: 2023-10-24T11:40:50.202Z
Updated: 2026-04-28T16:08:43.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24391 vulnerable 2026-06-08 05:56:05.377460 WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Spider Teams ApplyOnline plugin <= 2.5 versions.
Published: 2023-08-10T12:28:18.681Z
Updated: 2026-04-28T16:08:05.638Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.