Vulnerabilities (CVE)

Filtered by vendor Rednao Subscribe
Filtered by product Smart Forms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0163 1 Rednao 1 Smart Forms 2024-11-21 4.0 MEDIUM 6.5 MEDIUM
The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form.
CVE-2019-5924 1 Rednao 1 Smart Forms 2024-11-21 6.8 MEDIUM 8.8 HIGH
Cross-site request forgery (CSRF) vulnerability in Smart Forms 2.6.15 and earlier allows remote attackers to hijack the authentication of administrators via a specially crafted page.