Skip to content
OpenAdvisories

Vendor

optinlyhq

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-6782 Public exploit

    GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()

    The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient p…

  • High 7.5
    CVE-2025-6783 Public exploit

    GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()

    The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati…