CVE-2024-7389

概要

参考情報

• developers.hubspot.com/docs/api/webhooks · Related
• developers.hubspot.com/docs/api/webhooks · Related
• plugins.trac.wordpress.org/changeset/3047085/forminator/trunk/addons/pro/hubspot/lib/class-forminator-addon-hubspot-wp-api.php · Patch
• wordfence.com/threat-intel/vulnerabilities/id/0d04b822-a48a-485e-b9b5-f5a213307c71 · Third Party Advisory
• vicarius.io/vsociety/posts/source-code-dive-to-hunt-for-secrets-in-forminator-code-cve-2024-7389 · Exploit

forminator のその他の脆弱性

• CVE-2025-6464高 8.8The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all ve…
• CVE-2025-6463高 8.8The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to…
• CVE-2024-45625中 6.1Cross-site scripting vulnerability exists in Forminator versions prior to 1.34.1. If this vulnerability is exploited, an arbitrary script ma…
• CVE-2024-31857中 5.4Forminator prior to 1.15.4 contains a cross-site scripting vulnerability. If this vulnerability is exploited, a remote attacker may obtain u…
• CVE-2024-31077高 7.2Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenticated attacker with …