All 5 CVE vulnerabilities found in WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto, with AI-generated Chinese analysis, references, and POCs.
Vendor: tripetto
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-1530 | Tripetto <= 8.0.9 - Cross-Site Request Forgery to Arbitrary Results Deletion CWE-352 | 4.3 | Medium | 2025-03-15 |
| CVE-2024-13497 | WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 - Unauthenticated Stored Cross-Site Scripting CWE-80 | 7.2 | High | 2025-03-15 |
| CVE-2024-13829 | WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure CWE-200 | 5.3 | Medium | 2025-02-05 |
| CVE-2025-22295 | WordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2025-01-09 |
| CVE-2024-10260 | Tripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload CWE-79 | 7.2 | High | 2024-11-15 |
All 5 known CVE vulnerabilities affecting WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto with full Chinese analysis, references, and POCs where available.