← All credits
Tim Coen
98 vulnerability records and advisories credit this contributor.
CVE-2024-13509
WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-13506
GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter
CVE-2024-13504
Shared Files – Frontend File Upload Form & Secure File Sharing <= 1.7.42 - Limited Unauthenticated Stored Cross-Site Scripting via File Upload
CVE-2024-13498
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.8.1 - Unauthenticated Sensitive Information Exposure
CVE-2024-13497
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-13494
WordPress File Upload <= 4.25.2 - Cross-Site Request Forgery in wfu_file_details
CVE-2024-13452
Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action
CVE-2024-13451
Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure
CVE-2017-20064
Elefant CMS layout code injection
CVE-2017-20063
Elefant CMS File Upload drop privileges management