ThemeKraft Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)

• CVE-2024-12038 Medium 6.4 Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode 0.2%
• CVE-2024-12037 Medium 6.4 Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-8246 High 8.8 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation 0.4%
• CVE-2024-5149 Medium 6.5 BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness 0.4%
• CVE-2024-1158 Medium 4.3 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization 0.5%
• CVE-2024-1169 High 7.5 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload 0.6%
• CVE-2024-1170 High 8.2 Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Deletion 0.7%