Vulnerability history

Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload vulnerability

Insecure Direct Object References (IDOR) vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Broken Access Control vulnerability

Unauthenticated Payment Amount Validation Bypass via 'form_id' vulnerability

WordPress SureForms - Drag and Drop Form Builder for WordPress plugin <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability

Admin+ Stored XSS vulnerability

Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution vulnerability

Missing Authorization to Unauthenticated Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated (Contributor+) Information Disclosure vulnerability

Admin+ Stored XSS vulnerability

Missing Authorization to Authenticated (Contributor+) Form Creation vulnerability

Reflected XSS vulnerability

Unauthenticated PHP Object Injection (PHAR) vulnerability

Unauthenticated Arbitrary File Deletion

Admin+ Stored XSS vulnerability

Contributor+ Settings Update vulnerability

Missing Authorization to Unauthenticated Protected Post Disclosure vulnerability