Themekraft Post Form — known CVE vulnerabilities

Every CVE whose affected-product data names Themekraft Post Form, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-1170 — CVSS 8.2 (high): The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for…
• CVE-2024-1169 — CVSS 7.5 (high): The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for…
• CVE-2023-25981 — CVSS 6.5 (medium): Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form plugin <= 2.8.1 versions.