Fetchdesigns Sign-up Sheets — known CVE vulnerabilities

Every CVE whose affected-product data names Fetchdesigns Sign-up Sheets, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-24441 — CVSS 8.0 (high): The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export…
• CVE-2024-6020 — CVSS 6.1 (medium): The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter…
• CVE-2023-39165 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin <= 2.2.8 versions.
• CVE-2021-24440 — CVSS 4.8 (medium): The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high…