Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC), with AI-generated Chinese analysis, references, and POCs.

Vendor: themekraft

CVE IDTitleCVSSSeverityPublished
CVE-2024-12038 Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode CWE-79 6.4 Medium2025-02-22
CVE-2024-12037 Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-01-31
CVE-2024-8246 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation CWE-269 8.8 High2024-09-14
CVE-2024-5149 BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness CWE-330 6.5 Medium2024-06-05
CVE-2024-1158 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization CWE-862 4.3 Medium2024-03-13
CVE-2024-1169 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload CWE-862 7.5 High2024-03-07
CVE-2024-1170 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Deletion CWE-862 8.2 High2024-03-07

All 7 known CVE vulnerabilities affecting Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) with full Chinese analysis, references, and POCs where available.