Calderaforms Caldera Forms — known CVE vulnerabilities

Every CVE whose affected-product data names Calderaforms Caldera Forms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-0879 — CVSS 6.1 (medium): The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it back in the…
• CVE-2021-24896 — CVSS 4.8 (medium): The Caldera Forms WordPress plugin before 1.9.5 does not sanitise and escape the Form Name before outputting it in attributes, which could…