Skip to content
OpenAdvisories

Vendor

dcooperman

1 known vulnerabilities.

Products

MagicForm 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-0939

    MagicForm - WordPress Form Builder <= 1.6.2 - Missing Authorization

    The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing capability check on the plugin's AJAX actions in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber…

    dcooperman MagicForm Web / CMS