Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 38
   CVE NVD 2h ago

   The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion…

   The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the `bf_post_type` parameter. This is due to the public frontend…

   CVSS 9.8 CVE-2026-107622 Themekraft Web platform
2. 23
   CVE NVD 2h ago

   The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bf_post_type (and buddyforms_form_content)' parameter in…

   The BuddyForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bf_post_type (and buddyforms_form_content)' parameter in all versions up to, and including, 2.10.5 due to insufficient input sanitization…

   CVSS 5.4 CVE-2026-107658 Themekraft Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Themekraft&limit=100. RSS for this section: feed.xml.