WordPress plugin
WPQA - Builder forms Addon For WordPress security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium9
- Low0
All WPQA - Builder forms Addon For WordPress vulnerabilities
- Medium6.4Builder forms Addon For WordPress plugin <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
≤6.1.0Update to 6.1.1
- Medium4.3Cross-Site Request Forgery
≤6.1.0Update to 6.1.1
- Medium4.3Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference
≤5.9.2Update to 5.9.3
- High8.8Cross-Site Request Forgery
<5.9Update to 5.9
- Medium6.5Builder forms Addon For WordPress < 5.7 - Information Disclosure
<5.7Update to 5.7
- Medium5.3Builder forms Addon For WordPress <= 5.4 - Unauthenticated Private Message Disclosure
≤5.4Update to 5.5
- Medium6.1Builder forms Addon For WordPress <= 5.3 - Reflected Cross-Site Scripting
<5.4Update to 5.4
- Medium5.3Builder forms Addon For WordPress < 5.2 - Insecure Direct Object Reference to Private Message Disclosure
<5.2Update to 5.2
- Medium5.4Builder forms Addon For WordPress < 5.2 - Stored Cross-Site Scripting via Profile fields
<5.2Update to 5.2
- Medium6.4Builder forms Addon For WordPress < 5.2 - Insecure Direct Object Reference to Profile Picture Deletion
<5.2Update to 5.2
WPQA - Builder forms Addon For WordPress: common questions
Does WPQA - Builder forms Addon For WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in WPQA - Builder forms Addon For WordPress: 1 high, 9 medium. At least one is not fixed in the latest version.
How do I check which version of WPQA - Builder forms Addon For WordPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WPQA - Builder forms Addon For WordPress vulnerability?
CVE-2024-2375, published Jun 12, 2024: WPQA - Builder forms Addon For WordPress plugin <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any WPQA - Builder forms Addon For WordPress vulnerability listed in CISA KEV?
No. None of the known WPQA - Builder forms Addon For WordPress vulnerabilities is currently listed in the CISA KEV catalog.