Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Forms - Information Disclosure (CVE-2024-13818)
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.4 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about users contained in the exposed log files.
PLUGIN
Forms
CVE-2024-13818
Risk Score
Threat Entry
Updated 2026-06-17
Forms - Remote Code Execution (CVE-2024-13725)
The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included. If register_argc_argv is enabled on the server and pearcmd.php is installed, this issue might lead…
PLUGIN
Forms
CVE-2024-13725
Risk Score
Threat Entry
Updated 2026-06-17
Forms - Broken Access Control (CVE-2024-6069)
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pieregister_install_addon function in all versions up to, and including, 3.8.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins. As a result attackers might achieve code execution on the targeted server
PLUGIN
Forms
CVE-2024-6069
Risk Score
Threat Entry
Updated 2026-06-17
Forms - Cross-Site Request Forgery (CSRF) (CVE-2022-41134)
Cross-Site Request Forgery (CSRF) in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plugin
PLUGIN
Forms
CVE-2022-41134
Risk Score
Threat Entry
Updated 2026-06-17
Forms - Cross-Site Scripting (XSS) (CVE-2021-24505)
The Forms WordPress plugin before 1.12.3 did not sanitise its input fields, leading to Stored Cross-Site scripting issues. The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) vulnerability within the Forms "Add new" field.
PLUGIN
Forms
CVE-2021-24505
Risk Score