Skip to content
OpenAdvisories

Vendor

aankit

2 known vulnerabilities.

Products

SpiceForms Form Builder 1 Easy Maintenance Mode 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-12178

    SpiceForms Form Builder <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The SpiceForms Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'spiceforms' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This…

    aankit SpiceForms Form Builder Web / CMS
  • Medium 5.3
    CVE-2024-1477

    Easy Maintenance Mode <= 1.4.2 - Information Exposure

    The Easy Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the REST API. This makes it possible for authenticated attackers to obtain post and page content via REST API thus b…

    aankit Easy Maintenance Mode Web / CMS