Nasirahmed

Products

Exploited and recent CVEs

  • CVE-2026-104738 High 8.1 Advanced Form Integration <= 2.10.2 - Unauthenticated PHP Object Injection via $_POST Parameters –
  • CVE-2026-104797 High 8.1 Advanced Form Integration <= 2.9.0 - Unauthenticated Unverified Password Change to Authentication Bypass / Privilege Escalation via Contact Form 7 Submission to Ultimate Member Update Profile Field Action 0.4%
  • CVE-2026-16587 Medium 4.3 Advanced Form Integration <= 2.6.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary MailUp OAuth Token Overwrite via auth_redirect() Function 0.4%
  • CVE-2024-10877 Medium 6.1 AFI – The Easiest Integration Plugin <= 1.92.0 - Reflected Cross-Site Scripting 0.6%
  • CVE-2024-43340 Medium 4.3 WordPress AFI – The Easiest Integration Plugin plugin <= 1.89.4 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-32134 High 7.6 WordPress Forms to Zapier plugin <= 1.1.12 - Auth. SQL Injection vulnerability 0.5%
  • CVE-2024-2387 Medium 6.1 Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integration_id 1.6%
  • CVE-2023-50853 High 7.6 WordPress Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Plugin <= 1.75.0 is vulnerable to SQL Injection 0.5%
  • CVE-2022-47173 Medium 5.9 WordPress Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration Plugin <= 1.62.0 is vulnerable to Cross Site Scripting (XSS) 0.4%