Themekraft Buddyforms vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Themekraft Buddyforms: 3 record(s), with affected versions and fixes.cpe:2.3:a:themekraft:buddyforms
CVE-2026-81785
Medium · 6.5
CWE-862 Sep 10, 2026
WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions.
CVE-2025-62973
Medium · 5.3
CWE-862 Oct 26, 2025
WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2.
CVE-2025-32151
High · 8.8
CWE-98 Apr 4, 2025
WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themekraft BuddyForms buddyforms allows PHP Local File Inclusion.This issue affects BuddyForms: from n/a through 2.10.2.