forfront
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| e-shot | 2 | – | Apr 15, 2026 |
Exploited and recent CVEs
- CVE-2026-3642 e-shot <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Form Settings Modification via AJAX 0.4%
- CVE-2026-3546 e-shot <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via API Token via 'eshot_form_builder_get_account_data' AJAX Action 0.2%