Skip to content
OpenAdvisories

Product · ThemeCatcher

Quform - WordPress Form Builder

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure

    The Quform - WordPress Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the 'saveUploadedFile' function. This makes it possible for unauthenticated attackers to extract sensitiv…