softdiscover

Products

Exploited and recent CVEs

  • CVE-2025-13696 Medium 5.3 Zigaform <= 7.6.5 - Unauthenticated Form Submission Data Disclosure in rocket_front_payment_seesummary AJAX Endpoint 0.3%
  • CVE-2025-10744 Medium 5.9 File Manager, Code editor, backup by Managefy <= 1.6.1 - Unauthenticated Information Exposure 0.4%
  • CVE-2025-9345 Medium 4.9 File Manager, Code Editor, and Backup by Managefy <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download 0.5%
  • CVE-2025-26994 High 7.1 WordPress Zigaform – Price Calculator & Cost Estimation Form Builder Lite plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-26989 High 7.1 WordPress Zigaform – Form Builder Lite plugin <= 7.4.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-13573 Medium 6.4 Zigaform – Form Builder Lite <= 7.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13587 Medium 6.4 Zigaform – Price Calculator & Cost Estimation Form Builder Lite <= 7.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%