Approved changes feed: RSS · Atom

cpe:2.3:a:adrian_tobey:formlift_for_infusionsoft_web_forms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdrian Tobey (9b956b86-b04d-56dd-9770-293351c561f6)
ProductFormlift For Infusionsoft Web Forms (1f2a4220-1255-5671-8e2a-8959213ac447)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-47654 vulnerable 2026-06-08 07:27:14.683363 WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Reflected XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through <= 7.5.20.
Published: 2025-06-27T11:52:33.236Z
Updated: 2026-04-28T16:12:48.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31434 vulnerable 2026-06-08 07:18:57.797543 WordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Stored XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through <= 7.5.19.
Published: 2025-03-28T11:54:20.883Z
Updated: 2026-04-28T16:12:07.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38773 vulnerable 2026-06-08 06:41:48.084491 WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.
Published: 2024-07-22T10:07:53.644Z
Updated: 2026-04-28T16:10:06.682Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.