CVE-2023-52203MEDIUM 4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oliver Seidel, Bastian Germann cformsI…
CVE-2023-25449HIGH 8.8Cross-Site Request Forgery (CSRF) vulnerability in Oliver Seidel, Bastian Germann cformsII plugin <= 15.0.4 versions.
CVE-2014-10393MEDIUM 6.1The cforms2 plugin before 10.5 for WordPress has XSS.
CVE-2014-10392MEDIUM 6.1The cforms2 plugin before 10.2 for WordPress has XSS.
CVE-2017-18570CRITICAL 9.8The cforms2 plugin before 14.13 for WordPress has SQL injection in the tracking DB GUI via Delete Entries or Download Entries.