ThemeCatcher Quform - WordPress Form Builder vulnerabilities

Latest ThemeCatcher Quform - WordPress Form Builder CVEs

Newest publication first

1. CVE-2024-8756 Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure

   Published 2024-11-09

   Medium·CVSS 5.3 EPSS 0.38%

   The Quform - WordPress Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the 'saveUploadedFile' function. This makes it possible for unauthenticated attackers to extract sensitive data, such as Perso...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.