Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-21
Sign-up Sheets - Security Vulnerability (CVE-2026-92410)
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request handled in the session of a logged-in user with the required capability.
PLUGIN
Sign-up Sheets
CVE-2026-92410
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - PHP Object Injection (CVE-2025-49393)
Deserialization of Untrusted Data vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Object Injection.This issue affects Sign-up Sheets: from n/a through
PLUGIN
Sign Up Sheets
CVE-2025-49393
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - Cross-Site Request Forgery (CSRF) (CVE-2025-49391)
Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Cross Site Request Forgery.This issue affects Sign-up Sheets: from n/a through
PLUGIN
Sign Up Sheets
CVE-2025-49391
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - Remote Code Execution (CVE-2025-26996)
Improper Control of Generation of Code ('Code Injection') vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets allows Code Injection.This issue affects Sign-up Sheets: from n/a through
PLUGIN
Sign Up Sheets
CVE-2025-26996
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - Broken Access Control (CVE-2024-39654)
Missing Authorization vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through
PLUGIN
Sign Up Sheets
CVE-2024-39654
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - Cross-Site Scripting (XSS) (CVE-2024-6020)
The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site Scripting.
PLUGIN
Sign Up Sheets
CVE-2024-6020
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - Cross-Site Request Forgery (CSRF) (CVE-2024-31303)
Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets sign-up-sheets.This issue affects Sign-up Sheets: from n/a through
PLUGIN
Sign Up Sheets
CVE-2024-31303
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - Cross-Site Request Forgery (CSRF) (CVE-2023-39165)
Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin
PLUGIN
Sign Up Sheets
CVE-2023-39165
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - Security Vulnerability (CVE-2021-24441)
The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue
PLUGIN
Sign Up Sheets
CVE-2021-24441
Risk Score
Threat Entry
Updated 2026-06-17
Sign Up Sheets - Cross-Site Scripting (XSS) (CVE-2021-24440)
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboard
PLUGIN
Sign Up Sheets
CVE-2021-24440
Risk Score