Skip to content
OpenAdvisories

Vendor

odude

7 known vulnerabilities.

Products

Crypto Tool 5 Flexi – Guest Submit 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-32589

    WordPress Flexi – Guest Submit Plugin <= 4.28 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in odude Flexi – Guest Submit flexi allows PHP Local File Inclusion.This issue affects Flexi – Guest Submit: from n/a through <= 4.28.

    odude Flexi – Guest Submit
  • High 8.8
    CVE-2024-9990

    Crypto <= 2.15 - Cross-Site Request Forgery to Authentication Bypass

    The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15. This is due to missing nonce validation in the 'crypto_connect_ajax_process::check' function. This makes it possible for unauthenticated attack…

    odude Crypto Tool Web / CMS