Skip to content

CVE record · 1 source

CVE-2026-107658

CVSS 5.4

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bf_post_type (and buddyforms_form_content)' parameter in…

Vendor: Themekraft
Product: BuddyForms
CVSS v3.1: 5.4 AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-79
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

23

CVE NVD 3h ago

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bf_post_type (and buddyforms_form_content)' parameter in…

The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bf_post_type (and buddyforms_form_content)' parameter in all versions up to, and including, 2.10.5 due to insufficient input sanitization…

CVSS 5.4 CVE-2026-107658 Themekraft