Skip to content
OpenAdvisories

Vendor

vividcolorsjp

2 known vulnerabilities.

Products

AForms — Form Builder for Price Calculator & Cost Estimation 1 AForms Eats 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-13539

    AForms Eats <= 1.3.1 - Unauthenticated Full Path Disclosure

    The AForms Eats plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.3.1. This is due the /vendor/aura/payload-interface/phpunit.php file being publicly accessible and displaying error messages. This makes it poss…

    vividcolorsjp AForms Eats Web / CMS
  • Medium 5.3
    CVE-2024-6565

    AForms <= 2.2.6 - Unauthenticated Full Path Disclosure

    The AForms — Form Builder for Price Calculator & Cost Estimation plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.6. This is due to the plugin utilizing the aura library and allowing direct access to the php…

    vividcolorsjp AForms — Form Builder for Price Calculator & Cost Estimation Web / CMS