agentprime: themekraft-buddyformsEvery new CVE for themekraft-buddyforms.https://agentprime.io/CVE-2026-107658: BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusionhttps://agentprime.io/advisories/CVE-2026-107658/https://agentprime.io/advisories/CVE-2026-107658/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 11:17:40 GMTCVECVE-2026-107622: BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameterhttps://agentprime.io/advisories/CVE-2026-107622/https://agentprime.io/advisories/CVE-2026-107622/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Nov 2026 11:17:36 GMTCVEcriticalCVE-2026-81785: WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-81785/https://agentprime.io/advisories/CVE-2026-81785/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 14:23:40 GMTCVECVE-2025-62973: WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-62973/https://agentprime.io/advisories/CVE-2025-62973/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 01:34:16 GMTCVECVE-2025-32151: WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerabilityhttps://agentprime.io/advisories/CVE-2025-32151/https://agentprime.io/advisories/CVE-2025-32151/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Apr 2025 15:58:37 GMTCVECVE-2024-47377: WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2024-47377/https://agentprime.io/advisories/CVE-2024-47377/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Oct 2024 15:12:04 GMTCVECVE-2024-32830: WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerabilityhttps://agentprime.io/advisories/CVE-2024-32830/https://agentprime.io/advisories/CVE-2024-32830/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 May 2024 09:40:05 GMTCVECVE-2024-30198: WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2024-30198/https://agentprime.io/advisories/CVE-2024-30198/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Mar 2024 06:16:47 GMTCVE