Skip to content
OpenAdvisories

Vendor

flothemesplugins

4 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.5

    WordPress Flo Forms plugin <= 1.0.43 - Broken Access Control vulnerability

    Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flo Forms: from n/a through <= 1.0.43.

  • Medium 4.3

    WordPress Flo Forms plugin <= 1.0.41 - Broken Access Control vulnerability

    Missing Authorization vulnerability in flothemesplugins Flo Forms flo-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flo Forms: from n/a through <= 1.0.41.

  • Medium 6.4

    Flo Forms – Easy Drag & Drop Form Builder <= 1.0.35 - Options Change to Stored Cross-Site Scripting

    The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Options Change by using the flo_import_forms_options AJAX action in versions up to, and including, 1.0.35 due to insufficient input sanitizatio…