WordPress Electronic Signature Add-on for Fluent Forms plugin <= 2.0.5 - Insecure Direct Object References (IDOR) vulnerability
cve-program ·
https://wordpress.org/plugins: signature-fluent-contract-forms-add-on
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
https://wordpress.org/plugins: signature-fluent-contract-forms-add-on
cve-program ·
https://wordpress.org/plugins: booktics
cve-program ·
https://wordpress.org/plugins: support-genix-lite
cve-program ·
Vendor product: FreeRDP
cve-program ·
Vendor product: Fastcache by Host.it
cve-program ·
Vendor product: Kirki – Freeform Page Builder, Website Builder & Customizer
cve-program ·
Vendor product: Kirki – Freeform Page Builder, Website Builder & Customizer
cve-program ·
Vendor product: Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
cve-program ·
Vendor product: Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
cve-program ·
Vendor product: Post Export Import with Media
cve-program ·
Vendor product: Welcart e-Commerce
cve-program ·
Vendor product: Tutor LMS – eLearning and online course solution
cve-program ·
Vendor product: WP Booking System – Booking Calendar
cve-program ·
Vendor product: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
cve-program ·
Vendor product: WP Booking System – Booking Calendar
cve-program ·
Vendor product: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
cve-program ·
Vendor product: WP Booking System – Booking Calendar
cve-program ·
Vendor product: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
cve-program ·
Vendor product: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
cve-program ·
https://wordpress.org/plugins: fancy-facebook-comments
cve-program ·
Vendor product: weForms – Easy Drag & Drop Contact Form Builder For WordPress
cve-program ·
https://wordpress.org/plugins: gantry5
cve-program ·
https://wordpress.org/plugins: paytpv-for-woocommerce
cve-program ·
https://wordpress.org/plugins: sms-alert
cve-program ·
Vendor product: phpMyFAQ
cve-program ·
Vendor product: phpMyFAQ
cve-program ·
Vendor product: phpMyFAQ
cve-program ·
Vendor product: phpMyFAQ
cve-program ·
Vendor product: admidio
cve-program ·
Vendor product: vikunja
cve-program ·
Vendor product: Hippoo Mobile App for WooCommerce
cve-program ·
Vendor product: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
cve-program ·
Vendor product: xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN
cve-program ·
Vendor product: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
cve-program ·
Vendor product: Themify Builder
cve-program ·
Vendor product: Themify Popup
cve-program ·
Vendor product: EU VAT Assistant for WooCommerce
cve-program ·
Vendor product: Payment forms, Buy now buttons, and Invoicing System | GetPaid
cve-program ·
Vendor product: YMC Filter
cve-program ·
Vendor product: European VAT Compliance Assistant for WooCommerce
cve-program ·
Vendor product: BSK PDF Manager
cve-program ·
Vendor product: Contact Form 7 Signature Addon
cve-program ·
Vendor product: Patreon WordPress
cve-program ·
Vendor product: Patreon WordPress
cve-program ·
Vendor product: Patreon WordPress
cve-program ·
Vendor product: Ukr-To-Lat
cve-program ·
Vendor product: PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI)
cve-program ·
Vendor product: WP Data Access
cve-program ·
Vendor product: WP User Manager
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.