CVE-2019-9567

概要

参考情報

• lists.openwall.net/full-disclosure/2019/02/05/4 · Exploit
• security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection · Exploit
• wordpress.org/plugins/forminator · Vendor Advisory
• wpvulndb.com/vulnerabilities/9215 · Third Party Advisory

forminator のその他の脆弱性

• CVE-2025-6464高 8.8The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all ve…
• CVE-2025-6463高 8.8The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to…
• CVE-2024-45625中 6.1Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script ma…
• CVE-2024-7389高 7.5The Forminator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.29.1 via class-f…
• CVE-2024-31857中 5.4Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain u…