Advancedformintegration
Advancedformintegration Advanced Form Integration: vulnerabilidades y CVE
Advancedformintegration Advanced Form Integration tiene 11 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses3
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-16587 | Media (4.3) | 0.39% | — | 28 jul 2026 | The Advanced Form Integration — Connect Forms to 200+ Apps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.0. This is due to the plugin not properly verifying that a… |
| CVE-2026-11794 | Alta (8.1) | 0.37% | — | 1 jul 2026 | The Advanced Form Integration — Connect Forms to 200+ Apps WordPress plugin before 2.1.1 does not restrict the WordPress role assigned when it creates a user from a public form submission, allowing unauthenticated… |
| CVE-2026-42659 | Media (6.5) | 0.30% | — | 15 jun 2026 | Subscriber Broken Access Control in Advanced Form Integration <= 1.126.12 versions. |
| CVE-2024-13123 | Baja (3.5) | 0.26% | — | 25 mar 2025 | The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the… |
| CVE-2024-13122 | Baja (3.5) | 0.26% | — | 25 mar 2025 | The AFI WordPress plugin before 1.100.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the… |
| CVE-2024-56293 | Media (5.9) | 0.31% | — | 7 ene 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nasir Ahmed Advanced Form Integration advanced-form-integration allows Stored XSS.This issue affects Advanced Form… |
| CVE-2024-10877 | Media (6.1) | 0.57% | — | 13 nov 2024 | The AFI – The Easiest Integration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up… |
| CVE-2024-43340 | Media (4.3) | 0.18% | — | 26 ago 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form Integration: from n/a through 1.89.4. |
| CVE-2024-2387 | Media (6.1) | 1.6% | — | 20 mar 2024 | The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms plugin for WordPress is vulnerable to SQL Injection via the ‘integration_id’ parameter in all versions up to,… |
| CVE-2023-50853 | Alta (7.2) | 0.54% | — | 28 dic 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nasirahmed Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other… |
| CVE-2022-47173 | Media (4.8) | 0.39% | — | 23 mar 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nasirahmed Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration plugin <= 1.62.0 versions. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.