Skip to contentBrainstormforce Sureforms – Contact Form, Payment Form & Other Custom Form Builder vulnerabilities
- brainstormforce sureforms – contact form, payment form & other custom form builderSureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'CVE-2026-49877.5 High
- brainstormforce sureforms – contact form, payment form & other custom form builderSureForms <= 2.2.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-14855Public exploit7.2 High
- brainstormforce sureforms – contact form, payment form & other custom form builderSureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce DistributionCVE-2025-125355.3 Medium
- brainstormforce sureforms – contact form, payment form & other custom form builderSureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information ExposureCVE-2025-125365.3 Medium
- brainstormforce sureforms – contact form, payment form & other custom form builderSureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information DisclosureCVE-2025-107324.3 Medium
- brainstormforce sureforms – contact form, payment form & other custom form builderSureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form CreationCVE-2025-104894.3 Medium
- brainstormforce sureforms, sureforms – contact form, payment form & other custom form builder +1 moreSureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post DisclosureCVE-2024-127135.3 Medium