Skip to content
OpenAdvisories

Vendor

ThemeCatcher

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure

    The Quform - WordPress Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the 'saveUploadedFile' function. This makes it possible for unauthenticated attackers to extract sensitiv…