Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2023-32603

WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in RedNao Donations Made Easy – Smart Donations plugin <= 4.0.12 versions.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Rednao
Products
Smart Donations
CVE-2022-0163

Smart Forms < 2.6.71 - Subscriber+ Form Data Download

The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Rednao
Products
Smart Forms
CVE-2019-5924

Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Rednao
Products
Smart Forms