GCVE - cpe:2.3:a:edgarrojas:smart

Approved changes feed: RSS · Atom

cpe:2.3:a:edgarrojas:smart_forms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Edgarrojas (`ceed15b4-b207-5145-9857-80b6c9fef626`)
Product	Smart Forms (`9ba599bf-cb4a-5b5e-b1ec-58be7cd5f799`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-32574`	vulnerable	2026-11-03 10:16:40.372235	WordPress Smart Forms plugin <= 2.6.104 - Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Smart Forms: from n/a through 2.6.104. Published: 2026-10-06T08:34:03.141Z Updated: 2026-10-13T16:35:59.917Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/smart-forms/vulnerability/wordpress-smart-forms-plugin-2-6-104-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-49856`	vulnerable	2026-06-08 06:16:10.644854	WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability HIGH (8.1) Missing Authorization vulnerability in EDGARROJAS Smart Forms smart-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Forms: from n/a through <= 2.6.84. Published: 2024-12-09T11:30:01.555Z Updated: 2026-05-11T22:20:41.500Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/smart-forms/vulnerability/wordpress-smart-forms-plugin-2-6-84-authenticated-arbitrary-options-change-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.