creativform vulnerabilities (CVE)

CVE records published for creativform, newest first. Follow to get an email when a new one appears.

2 results

5.3Medium

CVE-2024-7381 2 years ago

Geo Controller <= 8.6.9 - Missing Authorization to Unauthenticated Shortcode Execution

creativform Geo Controller; wordpress geo_controller

The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization and capability checks on the ajax__shortcode_cache function in all versions up to, and including, 8.6.9. This makes it possible for unauthen…

4.3Medium

CVE-2024-7380 2 years ago

Geo Controller <= 8.7.3 - Missing Authorization to Authenticated (Subscriber+) Menu Creation/Deletion

creativform Geo Controller

The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability checks on the ajax__geolocate_menu and ajax__geolocate_remove_menu functions in all versions up to, and including, 8.7.3. This makes it poss…