Tripetto vulnerabilities
8 published CVEs name Tripetto among the affected products.
- 8Published CVEs8 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2025-1530
Tripetto <= 8.0.9 - Cross-Site Request Forgery to Arbitrary Results Deletion
tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto
Medium4.3 - CVE-2024-13497
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.9 - Unauthenticated Stored Cross-Site Scripting
tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto
High7.2 - CVE-2024-13829
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure
tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto
Medium5.3 - CVE-2025-22295
WordPress Tripetto plugin <= 8.0.6 - Cross Site Scripting (XSS) vulnerability
Tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto
High7.1 - CVE-2024-10260
Tripetto <= 8.0.11 - Unauthentiated Stored Cross-Site Scripting via Form File Upload
tripetto · WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto
High7.2 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3 - CVE-2021-36895
WordPress Tripetto plugin <= 5.1.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability via SVG image upload
Tripetto · Tripetto (WordPress plugin)
Medium4.7