Vulnerabilidades de Aman

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Aman: 6 registro(s), com severidade, exploração e correções.

Funnel Builder by FunnelKit 1 FunnelKit Automations 1 Views for WPForms 1 CF7 Views – Complete Entry Management for Contact Form 7 1 Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend 1 Popup addon for Ninja Forms 1

Somente exploradas (KEV) →

CVE-2026-40807 Alta · 7.1 CWE-79 06/10/2026

WordPress CF7 Views – Complete Entry Management for Contact Form 7 plugin <= 3.2.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions.

CVE-2026-39450 Alta · 7.1 CWE-288 15/06/2026

WordPress FunnelKit Automations plugin <= 3.7.3 - Broken Authentication vulnerability

Subscriber Broken Authentication in FunnelKit Automations <= 3.7.3 versions.

CVE-2026-42742 Alta · 8.5 CWE-89 12/05/2026

WordPress Views for WPForms plugin <= 3.4.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Views for WPForms views-for-wpforms-lite allows Blind SQL Injection.This issue affects Views for WPForms: from n/a through <= 3.4.6.

CVE-2026-42741 Alta · 8.5 CWE-89 12/05/2026

WordPress Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend plugin <= 3.3.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue affects Ninja Forms Views – Display & Edit Ninja Forms Submissions on your site frontend: from n/a through <= 3.3.2.

CVE-2025-66067 Média · 6.5 CWE-79 21/11/2025

WordPress Funnel Builder by FunnelKit plugin <= 3.13.1.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Funnel Builder by FunnelKit funnel-builder allows DOM-Based XSS.This issue affects Funnel Builder by FunnelKit: from n/a through <= 3.13.1.2.

CVE-2025-64264 Média · 5.9 CWE-79 13/11/2025

WordPress Popup addon for Ninja Forms plugin <= 3.5.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through <= 3.5.1.