CVE Intelligence

Themekraft vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Themekraft products: 2 record(s), with severity, exploitation and fixes.

Buddyforms 2

Exploited only (KEV) →

CVE-2025-62973 Medium · 5.3 CWE-862 Oct 26, 2025
WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2.
CVE-2025-32151 High · 8.8 CWE-98 Apr 4, 2025
WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Themekraft BuddyForms buddyforms allows PHP Local File Inclusion.This issue affects BuddyForms: from n/a through 2.10.2.