Formbuilder Project Formbuilder — known CVE vulnerabilities

Every CVE whose affected-product data names Formbuilder Project Formbuilder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-0830 — CVSS 6.5 (medium): The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting forms, and does not…
• CVE-2012-6715 — CVSS 6.1 (medium): The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.
• CVE-2016-10910 — CVSS 6.1 (medium): The formbuilder plugin before 1.06 for WordPress has multiple XSS issues.