Skip to content
OpenAdvisories

Vendor

Nasir Ahmed

11 known vulnerabilities.

Products

Advanced Form Integration 3 AFI – The Easiest Integration Plugin 2 Advanced Form Integration — Connect Forms to 300+ Apps 2 Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook 1 Advanced Form Integration — Connect Forms to 200+ Apps 1 Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration 1 Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-16587

    Advanced Form Integration <= 2.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function

    The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a user is authorized to perform an action.…

    Nasir Ahmed Advanced Form Integration — Connect Forms to 200+ Apps Web / CMS
  • Medium 6.5
    CVE-2026-42659

    WordPress Advanced Form Integration plugin <= 1.126.12 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions.

    Nasir Ahmed Advanced Form Integration
  • Medium 5.9
    CVE-2024-56293

    WordPress AFI – The Easiest Integration Plugin <= 1.95.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Stored XSS.This issue affects Advanced Form Integration: from n/a through <= 1.95.0.

    Nasir Ahmed Advanced Form Integration
  • Medium 6.1
    CVE-2024-10877

    AFI – The Easiest Integration Plugin <= 1.92.0 - Reflected Cross-Site Scripting

    The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.92.0. This makes i…

    Nasir Ahmed AFI – The Easiest Integration Plugin Web / CMS
  • Medium 4.3
    CVE-2024-43340

    WordPress AFI – The Easiest Integration Plugin plugin <= 1.89.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form Integration: from n/a through 1.89.4.

    Nasir Ahmed Advanced Form Integration
  • Medium 6.1
    CVE-2024-2387 Public exploit

    Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integration_id

    The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms plugin for WordPress is vulnerable to SQL Injection via the ‘integration_id’ parameter in all versions up to, and including, 1.82.0 due to insufficient…

    Nasir Ahmed AFI – The Easiest Integration Plugin Web / CMS
  • Medium 5.9
    CVE-2022-47173

    WordPress Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Plugin <= 1.62.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nasirahmed Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration plugin <= 1.62.0 versions.

    Nasir Ahmed Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Web / CMS