Skip to content
OpenAdvisories

Product · Epiphyt

Form Block

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Cross Site Request Forgery due to missing nonce verification in form block

    Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing nonce check. There is potential for a Cross Site Request Forgery for all form blocks, since it allows …