Tripetto vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20242
3. 20254
4. 20261

Newest CVEs

• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-1530

  Tripetto <= 8.0.9 - Cross-Site Request Forgery to Arbitrary Results Deletion

  tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto

  Medium4.3
• CVE-2024-13497

  WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 - Unauthenticated Stored Cross-Site Scripting

  tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto

  High7.2
• CVE-2024-13829

  WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure

  tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto

  Medium5.3
• CVE-2025-22295

  WordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability

  Tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto

  High7.1
• CVE-2024-10260

  Tripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload

  tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto

  High7.2
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2021-36895

  WordPress Tripetto plugin <= 5.1.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability via SVG image upload

  Tripetto · Tripetto (WordPress plugin)

  Medium4.7