https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 15:41:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-282778 EUVD-2026-282778 https://cve.radiocsirt.org/vuln/euvd-2026-282778 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14782 <p>The Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.49.1 via the &#39;listen_for_csv_export&#39; function. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with access to the Forminator dashboard, to export sensitive form submission data including personally identifiable information.</p> <p>The Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.49.1 via the &#39;listen_for_csv_export&#39; function. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with access to the Forminator dashboard, to export sensitive form submission data including personally identifiable information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14782 https://cve.radiocsirt.org/vuln/ghsa-4jc9-6xgj-c97r <p>The Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.49.1 via the &#39;listen_for_csv_export&#39; function. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with access to the Forminator dashboard, to export sensitive form submission data including personally identifiable information.</p> <p>The Forminator Forms – Contact Form, Payment Form &amp; Custom Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.49.1 via the &#39;listen_for_csv_export&#39; function. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with access to the Forminator dashboard, to export sensitive form submission data including personally identifiable information.</p> https://cve.radiocsirt.org/vuln/ghsa-4jc9-6xgj-c97r