Vulnerabilities and security researches forsign-up-sheets sign-up-sheets

Apr 17, 2025

CVE, Research URL: CVE-2025-26996
Home page URL: Security reports for Sign-up Sheets
Application: Sign-up Sheets
Date: Apr 16, 2025
Research Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Fetch Designs Sign-up Sheets allows Code Injection. This issue affects Sign-up Sheets: from n/a through 2.3.0.1.
Affected versions: Min -, max -.
Status: vulnerable

Sep 05, 2024

CVE, Research URL: CVE-2024-6020
Home page URL: Security reports for Sign-up Sheets
Application: Sign-up Sheets
Date: Sep 04, 2024
Research Description: The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site Scripting.
Affected versions: Min -, max -.
Status: vulnerable

Aug 05, 2024

CVE, Research URL: CVE-2024-39654
Home page URL: Security reports for Sign-up Sheets
Application: Sign-up Sheets
Date: Nov 01, 2024
Research Description: Missing Authorization vulnerability in Fetch Designs Sign-up Sheets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sign-up Sheets: from n/a through 2.2.12.
Affected versions: Min -, max -.
Status: vulnerable

Jun 07, 2024

CVE, Research URL: CVE-2024-31303
Home page URL: Security reports for Sign-up Sheets
Application: Sign-up Sheets
Date: Apr 12, 2024
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets.This issue affects Sign-up Sheets: from n/a through 2.2.11.1.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2021-24441
Home page URL: Security reports for Sign-up Sheets
Application: Sign-up Sheets
Date: Jul 13, 2021
Research Description: The Sign-up Sheets WordPress plugin before 1.0.14 does not not sanitise or validate the Sheet title when generating the CSV to export, which could lead to a CSV injection issue
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2021-24440
Home page URL: Security reports for Sign-up Sheets
Application: Sign-up Sheets
Date: Jul 13, 2021
Research Description: The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboard
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2023-39165
Home page URL: Security reports for Sign-up Sheets
Application: Sign-up Sheets
Date: Oct 03, 2023
Research Description: Cross-Site Request Forgery (CSRF) vulnerability in Fetch Designs Sign-up Sheets plugin <= 2.2.8 versions.
Affected versions: Min -, max -.
Status: vulnerable