#wpazleen
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-114672
📊 9.8/10
🏢 wpazleen

📝 The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in al...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-114672

#cybersecurity #infosec #cve #euvd
October 31, 2026 at 10:02 AM
stackflag.bsky.social
CVE-2026-118235 - simpleform – form maker to chat apps with quiz, poll and multi lead notifications
The SimpleForm form‑maker plugin for WordPress (up to version 3.10.2) does not properly check uploaded file names,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wpazleen #CVE #infosec
CVE-2026-118235: SimpleForm plugin lets anyone upload malicious files
The SimpleForm form‑maker plugin for WordPress (up to version 3.10.2) does not properly check uploaded file names, so a visitor can upload a file with a.
stackflag.com
November 1, 2026 at 5:30 AM
euvd-bot.bsky.social
🚨 EUVD-2026-103219
📊 4.9/10
🏢 wpazleen

📝 The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103219

#cybersecurity #infosec #cve #euvd
October 17, 2026 at 5:03 AM
offseq.bsky.social
CVE-2026-104748: CRITICAL in SimpleForm WordPress plugin (<=3.10.0) — unauthenticated attackers can create admin accounts via exposed AJAX endpoint. Disable or restrict plugin use until patched. https://radar.offseq.com/threat/cve-2026-104748-cwe-269-improper-privilege-management-in-wpazleen-simp...
CVE-2026-104748: CWE-269 Improper Privilege Management in wpazleen SimpleForm –
CVE-2026-104748 is a critical privilege escalation vulnerability in the SimpleForm WordPress plugin (versions up to and including 3.10.0). The vulnerability stems from the `wp_ajax_nopriv_simpleform_wp_register` AJAX action lacking any capa
radar.offseq.com
October 14, 2026 at 10:30 AM
euvd-bot.bsky.social
🚨 EUVD-2026-100911
📊 9.8/10
🏢 wpazleen

📝 The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100911

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 9:02 AM
euvd-bot.bsky.social
🚨 EUVD-2026-100912
📊 7.2/10
🏢 wpazleen

📝 The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deseriali...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100912

#cybersecurity #infosec #cve #euvd
October 14, 2026 at 9:02 AM
stackflag.bsky.social
CVE-2026-104748 - simpleform – form maker to chat apps with quiz, poll and multi lead notifications
The SimpleForm form‑maker plugin for WordPress (versions up to 3.10.0) allows anyone on the internet to register a…

Too many irrelevant or confusing CVEs? Use stackflag.com

#wpazleen #CVE #infosec
CVE-2026-104748: SimpleForm plugin lets anyone create admin account
The SimpleForm form‑maker plugin for WordPress (versions up to 3.10.0) allows anyone on the internet to register a new user with administrator rights.
stackflag.com
October 14, 2026 at 8:50 AM
euvd-bot.bsky.social
🚨 EUVD-2026-96096
📊 4.9/10
🏢 wpazleen

📝 The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_pa...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-96096

#cybersecurity #infosec #cve #euvd
October 10, 2026 at 7:04 AM
euvd-bot.bsky.social
🚨 EUVD-2026-42785
📊 7.2/10
🏢 wpazleen

📝 The Post Export Import with Media plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.13.1 via the import...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-42785

#cybersecurity #infosec #cve #euvd
July 10, 2026 at 5:00 AM