Known Vulnerabilities for Simple Form by Plataformatec
Listed below are 1 of the newest known vulnerabilities associated with "Simple Form" by "Plataformatec".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44719 json | Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful. From 0.2.0 to before 0.1... | Not Provided | 2026-05-15 | 2026-05-15 |
| CVE-2026-14487 json | The Simple Coherent Form plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validati... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-10100 json | The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fields ... | Not Provided | 2026-06-02 | 2026-06-02 |
| CVE-2026-8172 json | The Simple Basic Contact Form WordPress plugin through 20250114 does not escape user-supplied input before reflecting it into... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-7459 json | The Simple History – Track, Log, and Audit WordPress Changes plugin for WordPress is vulnerable to authenticated (Subscribe... | Not Provided | 2026-05-30 | 2026-06-01 |
| CVE-2026-6951 json | Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [... | Not Provided | 2026-04-25 | 2026-07-15 |
| CVE-2023-41136 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Laurence/OhMyBox.Info S... | Not Provided | 2023-11-30 | 2026-04-28 |
| CVE-2019-16676 json | Plataformatec Simple Form has Incorrect Access Control in file_method? in lib/simple_form/form_builder.rb, because a user-sup... | 9.8 - CRITICAL | 2019-09-30 | 2019-10-04 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Plataformatec | Simple Form | 5.0 | |||
| Application | Plataformatec | Simple Form | 4.1.0 | |||
| Application | Plataformatec | Simple Form | 4.0.1 | |||
| Application | Plataformatec | Simple Form | 4.0.0 | |||
| Application | Plataformatec | Simple Form | 3.5.1 | |||
| Application | Plataformatec | Simple Form | 3.5.0 | |||
| Application | Plataformatec | Simple Form | 3.4.0 | |||
| Application | Plataformatec | Simple Form | 3.3.1 | |||
| Application | Plataformatec | Simple Form | 3.3.0 | |||
| Application | Plataformatec | Simple Form | 3.2.1 | |||
| Application | Plataformatec | Simple Form | 3.2.0 | |||
| Application | Plataformatec | Simple Form | 3.1.1 | |||
| Application | Plataformatec | Simple Form | 3.1.0 | |||
| Application | Plataformatec | Simple Form | 3.1.0 | |||
| Application | Plataformatec | Simple Form | 3.1.0 | |||
| Application | Plataformatec | Simple Form | 3.0.4 | |||
| Application | Plataformatec | Simple Form | 3.0.3 | |||
| Application | Plataformatec | Simple Form | 3.0.2 | |||
| Application | Plataformatec | Simple Form | 3.0.1 | |||
| Application | Plataformatec | Simple Form | 3.0.0 |