← Back

Form Maker

form_maker

Vendor: Web Dorado • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-10504
1Web Dorado
1Form Maker
Nov 21, 2024
Apr 27, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.
CVE-2018-5991
1Web Dorado
1Form Maker
Jun 17, 2026
Feb 17, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798.