Skip to content
OpenAdvisories

Vendor

Themekraft

24 known vulnerabilities.

Products

BuddyForms 8 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) 7 BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages 3 WooBuddy 2 Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions 1 TK Google Fonts GDPR Compliant 1 Post Form 1 All in One Invite Codes 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2024-32830 Public exploit

    WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeKraft BuddyForms allows Server Side Request Forgery, Relative Path Traversal.This issue affects BuddyForms: from n/a through 2.8.8.

    Themekraft BuddyForms