Skip to content
OpenAdvisories

Vendor

softdiscover

7 known vulnerabilities.

Products

Zigaform – Price Calculator & Cost Estimation Form Builder Lite 3 File Manager, Code Editor, and Backup by Managefy 2 Zigaform 1 Zigaform – Form Builder Lite 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-13696

    Zigaform <= 7.6.5 - Unauthenticated Form Submission Data Disclosure in rocket_front_payment_seesummary AJAX Endpoint

    The Zigaform plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.6.5. This is due to the plugin exposing a public AJAX endpoint that retrieves form submission data without performing authorization checks to…

    softdiscover Zigaform – Price Calculator & Cost Estimation Form Builder Lite Web / CMS
  • Medium 5.9
    CVE-2025-10744

    File Manager, Code editor, backup by Managefy <= 1.6.1 - Unauthenticated Information Exposure

    The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to …

    softdiscover File Manager, Code Editor, and Backup by Managefy Web / CMS
  • Medium 4.9
    CVE-2025-9345 Public exploit

    File Manager, Code Editor, and Backup by Managefy <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download

    The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajax_downloadfile() function. This makes it possible for authenticated attackers, with Subscriber-le…

    softdiscover File Manager, Code Editor, and Backup by Managefy Web / CMS
  • Medium 6.4
    CVE-2024-13573

    Zigaform – Form Builder Lite <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Zigaform – Form Builder Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zgfm_rfvar' shortcode in all versions up to, and including, 7.4.2 due to insufficient input sanitization and output escaping on user supplied …

    softdiscover Zigaform – Form Builder Lite Web / CMS
  • Medium 6.4
    CVE-2024-13587

    Zigaform – Price Calculator & Cost Estimation Form Builder Lite <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Zigaform – Price Calculator & Cost Estimation Form Builder Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zgfm_fvar' shortcode in all versions up to, and including, 7.4.7 due to insufficient input sanitization and…

    softdiscover Zigaform – Price Calculator & Cost Estimation Form Builder Lite Web / CMS