Skip to content
OpenAdvisories

Product · cscode

EleForms – All In One Form Integration including DB for Elementor

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 4.3

    EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery

    The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.9.9. This is due to missing or incorrect nonce validation when deleting form submi…

  • Medium 5.3

    EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization

    The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several functions in all versions up to, and including, 2.9.9.9. This makes it possibl…

  • Medium 5.3

    EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.7 - Missing Authorization to Sensitive Information Exposure

    The EleForms – All In One Form Integration including DB for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when downloading form submissions in all versions up to, and including, 2.9.9.7. This mak…